Splunk Search

Timechart - x-axis to show label/ticks as Sunday instead of Monday

andrewwjc
Engager

Hey there folks!

Can't believe I'm stuck on something which could be pretty simple.
I have a timechart with span=1d working well.
However, I can't seem to get the x-axis label (tick marks) to show Sundays instead of Mondays.
The weekly interval tick marks is ideal, but I just need it to be Sundays instead.

Is there a way?

|inputlookup test.csv
        | replace N/A WITH N IN 2B_FLAG
        | replace N WITH 2C, Y WITH 2B IN 2B_FLAG
        | eval NewTime=strptime(SHP_CREATED_DTM,"%d-%b-%y")
        | where NewTime>=1577836800
        | eval _time=NewTime
          | timechart span=1d sum(SHP_VOL) by 2B_FLAG
          | sort _time

alt text

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...