Splunk Search

How to supress the x axis label in timechart

FRoth
Contributor

I use a lot of timechart searches for a dashboard, each of them showing the "_time" label in the x-axis.

As it is clear that the x-axis is based on time I would like to suppress the "_time" label in the x-axis completely to gain more space i.e. to add more height to the charts.

Saving my searches the x-Axis Title is empty. Is there a way to free the space consumed by the unnecessary default label "_time"?

Thanks

helge
Builder

I have the same problem with 5.0.1 on Windows x64.

0 Karma

oguzbilgic
New Member

How did you solve this? I am using splunk storm.

0 Karma

FRoth
Contributor

I am using version 4.3 build 115073 for Windows x64.



I noticed this behavior only with the "timechart" function when integrating the timecharts into dashboards. The "_time" x axis title does not appear while using "timechart" in the Advanced Charting.
alt text

FRoth
Contributor

I did and the "_time" did disappear. Using a space in the X-Axis Title shows an empty white space as a placeholder. BUT - I would like to free the space so that the graph has more vertical space to expand. The white space uses about 25px in height showing nothing while the graph is narrowed vertically.

araitz
Splunk Employee
Splunk Employee
0 Karma

araitz
Splunk Employee
Splunk Employee

What version of Splunk are you using, and in which views are you seeing this? In version 4.3, both the timeline and charting views don't have _time on the x-axis. You can use HiddenChartFormatter or XAxisTitleFormatter modules to specify a title, otherwise there shouldn't be one.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...