×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
estrand
New Member
Member since: ‎04-20-2011
‎06-05-2020
Community Statistics
Posts 3
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎04-20-2011
Activity Feed
Topics I've Started
View All

Re: Timechart question

by in Splunk Search
‎05-05-2011 06:29 PM
‎05-05-2011 06:29 PM
Thanks. That's the closest so far. The avg gives me slightly lower values on the spikes, but not by a lot. I'll leave it like this a few days and see if I can live with it 🙂 ... View more

Re: Timechart question

by in Splunk Search
‎05-04-2011 06:38 PM
‎05-04-2011 06:38 PM
Yes, I forgot to mention that, span=2m gives me 24 hour graph, but the values are different over a 2 minute span than a 1 minute span ... View more

Timechart question

by in Splunk Search
‎05-04-2011 01:11 PM
‎05-04-2011 01:11 PM
Hi, I have the following saved query display as a graph in a view index="generator" CustomGenerator earliest=-12h latest=-1m | rex field=_raw "sessionid : (? .*)|timechart span=1m dc(sessionid) as Sessions This gives me a graph of unique sessions per minute over the last 12 hours and seems to work fine. However, what I really want is this graph over the last 24 hours. When I change earliest=-12h to earliest=-24h, the graph only displays the last 15 hours or so. How can I best get around this? Thanks, -Erik ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:02 AM