I guess the cause for this is that after using strftime(), the chart values on the X-Axis are not anymore of type TIME, but CATEGORY. Unfortunately, I think that it is not possible to properly space the major labels for a CATEGORY axis because the param "charting.axisLabelsX.majorUnit" does not seem to exist for category axis type. Does anyone know how to space category labels? ... View more

Thanks for your replies - The proposed method worked: ... | timechart span=1m sum(HTTP_5xx) | fillnull value=0 | rename _time AS Time | eval Time=strftime(Time, "%m-%d %H:%M") However, using the above search command, the labels on the X-Axis disappear. This is how chart labels looked before ("bad" timestamp formatting, but proper labels): This is how chart labels look now (proper timestamp formatting, but labels not shown): I use the following chart formatting option the force label visibility: <param name="charting.primaryAxisLabels.majorLabelVisibility">show</param> However, with the reformatted timestamps, the labels only partly appear (i.e. they are still cut off) when stretching the chart horizontally to ~ 2000 pixels... ... View more