Splunk Search

a month time of x axis with span of 5 min window?

cpuppet
Path Finder

is there anyways to show a whole month of graph with a time span of 5 min window
splunk has reduce the chart to 4 days instead of showing the whole month (i would think its to reduce the complexity when showing every little bit in the graph) but just for the heck of wanting to show everything on it...
possible?

Tags (2)
0 Karma
1 Solution

lguinn2
Legend

I think you are hitting the limit of Splunk's chart resolution. I don't think there is any way to do this in Splunk. The underlying technology in the current release (4.2.4), and earlier, is Flash.

But perhaps someone else will have a brilliant solution...

View solution in original post

0 Karma

lguinn2
Legend

I think you are hitting the limit of Splunk's chart resolution. I don't think there is any way to do this in Splunk. The underlying technology in the current release (4.2.4), and earlier, is Flash.

But perhaps someone else will have a brilliant solution...

0 Karma

Ayn
Legend

Why would you want to do this? You're pointing out a number of issues with it yourself and I see no reason for using that kind of time resolution.

0 Karma

cpuppet
Path Finder

thanks for the confirmation, though i thought it was impossible, still worth a try if any developers had thought of a brilliant way to make it work...however...my concern also lies with the complexity it would be if having so many segments in such a small chart...

0 Karma

lguinn2
Legend

Doh! Thanks gkanapathy, I should have realized that, too!

0 Karma

gkanapathy
Splunk Employee
Splunk Employee

You are also hitting the resolution of the display. it is impossible to display, so it is pointless to compute. 5 minutes for the month is 12x24x30 = 8640 points. Your screen doesn't have that many pixels. printing landscape mode at 600 dpi on a legal sheet of paper doesn't have that many pixels (14x600 = 8400).

Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...