Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Getting rid of unused time in timechart

$
0
0
Given a search: index="muni" | nbclosest | timechart span=30m dc(vehicle_id) as NumVehicles (where `nbclosest` is a custom search command that filters results and isn't relevant to this question) it correctly charts the data, but the problem the data is only from a subset of hours in the day, e.g., 10am to 7pm. When plotting it, it looks like the attached image: ![alt text][1] I'd like to change the chart so that the times outside 10am-7pm aren't displayed at all. It would be as if the chart were squished horizontally by removing midnight-10am and 7pm-midnight. How can I do this? [1]: /storage/temp/158189-screen-shot-2016-08-30-at-91504-pm.png

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>