i need to change span parameter depending on the time range
how can i set dynamycly changing of span in my search query?
or if it's impossible how can i set my span parameter like this:
.....
| eval spanValue=floor(0.0541/15*900)
| eval unit="m@m"
| eval spanConcatinated=spanValue."".unit
| timechart span=spanConcatinated
.....
Check out the answer here:
Don't forget to UpVote
!
thanks a lot!
Hi @mishaaaaaaaaaa
check this
https://answers.splunk.com/answers/443382/set-span-in-timechart-based-on-value-from-time-pic.html
Don't forget to UpVote
!
Thanks a lot! that's what i was looking for!
While we certainly appreciate your UpVotes
here, @mishaaaaaaaaaa, I was talking about the other Answers inside the links that we referenced. The reason that this is important, is so that others will be more easily able to find the answers straight away and not have to post duplicate questions like you did (having not been able to find the other Q&As when searching).