is there anyways to show a whole month of graph with a time span of 5 min window
splunk has reduce the chart to 4 days instead of showing the whole month (i would think its to reduce the complexity when showing every little bit in the graph) but just for the heck of wanting to show everything on it...
possible?
I think you are hitting the limit of Splunk's chart resolution. I don't think there is any way to do this in Splunk. The underlying technology in the current release (4.2.4), and earlier, is Flash.
But perhaps someone else will have a brilliant solution...
I think you are hitting the limit of Splunk's chart resolution. I don't think there is any way to do this in Splunk. The underlying technology in the current release (4.2.4), and earlier, is Flash.
But perhaps someone else will have a brilliant solution...
Why would you want to do this? You're pointing out a number of issues with it yourself and I see no reason for using that kind of time resolution.
thanks for the confirmation, though i thought it was impossible, still worth a try if any developers had thought of a brilliant way to make it work...however...my concern also lies with the complexity it would be if having so many segments in such a small chart...
Doh! Thanks gkanapathy, I should have realized that, too!
You are also hitting the resolution of the display. it is impossible to display, so it is pointless to compute. 5 minutes for the month is 12x24x30 = 8640 points. Your screen doesn't have that many pixels. printing landscape mode at 600 dpi on a legal sheet of paper doesn't have that many pixels (14x600 = 8400).