Trying to get a distribution of page loading times.
... | chart count by load_time cont=false span=1000
The times (in seconds) go: ... 11, 12, 13, 14, 16, 17, 23
The graph does not display "gaps" in data, since each second is treated as a distinct category, and not as part of a sequence.
How to display every bin, even those with no values?
The documentation claims "If cont=true, bins that have no values will display with a count of 0." However, when I set cont=true, the bins are displayed in lexographic, rather than numeric, order.
Use cont=true
and then fix the order of your fields with one of these solutions:
https://answers.splunk.com/answers/530376/chart-using-span-logs-does-not-show-the-columns-in.html
https://answers.splunk.com/answers/513688/how-to-maintain-the-exact-sequence-of-columns-in-c.html?ch... (see my unaccepted answer).
https://answers.splunk.com/answers/514202/how-to-rename-the-x-axis-points-in-my-chart-from-m.html (see my unaccepted answers).