I am trying to show daily values for the last x weeks, using the timewrap command to overlap the weeks (i.e. weekX, weekX-1,...)
The line chart is not showing lines, it is just showing the dots. Not sure if this is an issue or my issue. Can anyone advise? maybe my search is incorrect?
This is my search:
index=core .... earliest=-5w@w1 latest=+w@w1 | timechart span=d sum(c140509343) as "kpi1" | timewrap w series=exact
Below is what I am getting:
EDIT1
using the answer below makes the lines join up. however if i seleect a column chart, the date order of the values are not correct. For example if i look at wednesday below I get the following order from left to right (hopefully it is clear in the picture)
wednesday from week beginning sep20th
wednesday from week beginning sep13th
wednesday from week beginning sep06th
wednesday from week beginning aug30th
a gap
wednesday from week beginning oct05th
wednesday from week beginning sep28th
Ideally I would like these to be left to right, oldest date to newest.
The "problem" here is that you don't have the data in between the points. So, it doesn't "connect" the dots. You can "force" it, by editing the visual format and choosing the option to connect the lines for null values.
tks,see my edit1 above which hopefully explains it better.
tks got it to work but just after noticing that it does not sort the dates left to right for each daily value. it would be good if I could control this ordering?
Can you put an example of what you are referring to?
if i change the span=d
to span=h
a line chart is drawn normally with lines and dots.