I have got a query that I that I turned into a dashboard. It has two panels, one is a line chart and the other a statistics table. The query behind the chart looks like this:
index=ivr sourcetype=ivr_SEF applicationName=testApp CV4_TExCd!=000000 | lookup lookuptable.csv TeamCode AS CV4_TExCd OUTPUT Site AS Site| timechart span=1h count by Site useother=F
My problem is that on the line chart, the x axis only displays hour value at 4 hour intervals ( so 8PM - 12 AM - 4AM - 8AM -12PM -4PM ....) How do I tweak my xml code to display hourly ( 01AM -2AM- 3AM -4AM - 5AM, etc) intervals?
Here is the xml code:
Hello World
Dashboard Test
index=ivr sourcetype=ivr_SEF applicationName=testApp CV4_TExCd!=000000 | lookup lookuptable.csv TeamCode AS CV4_TExCd OUTPUT Site AS Site| timechart span=1h count by Site useother=F -24h@h now 1
I have seen a similar post but it is really old. I tried it and it doesn't work for me:
https://answers.splunk.com/answers/91717/timechart-x-axis.html?utm_source=typeahead&utm_medium=newquestion&utm_campaign=no_votes_sort_relev
Please help!
↧