Hi, I need my charts in Splunk to be displayed in SI International System of Units (metric system). When using "Number Abbreviations" in format Y-Axis the prefix of 10^9 will be display as B (Billion), instead of wanted G (Giga). Second question is how to display time in 24h format instead of AM/PM (X-Axis). Thx /Henrik ... View more

I have two searches and I am trying to join start and stop post based on event name. Problem is event name could be the same so ”stats first(*) as * by Event_same_name” is not working for me. I have sorted the table based on time, so I know the start and stop is in chronicle and correct order Table: Event_same_name Start_epoch Stop_epoch Event time_A Event time_B Event time_C Event time_D Event time_E Event time_F Output: Event_same_name Start_epoch Stop_epoch Event time_A time_B Event time_C time_D Event time_E time_F ... View more