Dashboards & Visualizations

Displaying duration in human-readable format instead of seconds on chart by axis Y?

greg
Communicator

I have an advanced XML chart that displays duration in seconds on axis Y.

Sometimes, when the values are high, axis labels become difficult to interpret:

alt text

Can I set the labels in human-readable format, in appropriate value range, like this:

alt text

So far I've just set the axis type as

<param name="charting.axisY">time</param>

to have duration converted to epoch time (starting from 1970-10-01).

However for big duration values my workaround doesn't look very well since full date timestamps are included into label markers for the bottom and top values on the Y-axis.

alt text

Is there any way to configure a label convertor for the proper time scale?

lguinn2
Legend

In the search, where you are calculating the duration, can you add

 | fieldformat timeVariable = tostring(timeVariable,"duration")

I don't know if this will help on the chart in advanced XML, but it would make the durations look better in a table...

lguinn2
Legend

I don't think there is a way to use one representation (such as epoch time) for the data values and a different (though corresponding) representation for the scale... if fieldformat doesn't do it, then I don't know what will.

0 Karma

greg
Communicator

As for the tabular data, yes, I've already done so.
But still looking for a solution on axis labels...

Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...