I am using the following:
..| bucket span=100 time_taken | stats count(_time) by time_taken
When I change the time the axis labels 0-100,100-200.. are sometimes visible and they are sometimes not.
I want time to be seen all the time irrespective of my time change. It is ok to show a fixed label on the axis but I do not know how to do that.
Any help is appreciated. Thanks
Whether or not x-axis labels are shown or not depends upon the number of data points/x-axis values to be shows versus pixel available for each data point/label. With higher time range(and fixed span), the number of data point may have grown to the limit that it can't be shown.
See this for more info. https://docs.splunk.com/Documentation/Splunk/6.6.1/Viz/ChartDisplayissues#Category_limit
Can we use some sort of function to limit just particular set of values say for 0-100, 100-200, 200-300,300-400.. Can we display just 0-100, 300-400. This would limit the items on the and give charts the pixel area needed?
You can zoom into the X-axis to view labels that are hidden by the category limit. See Pan and zoom chart controls for details.
http://docs.splunk.com/Documentation/Splunk/6.6.1/Viz/Chartcontrols#Pan_and_zoom_chart_controls
@DalJeanis I meant without zooming something to implement the above mentioned creteria