Hi DalJeanis,
First of all, thank you for replying to my question!
After looking at points 1 and 2, I realized what I actually needed. I require the graph to just show the temperatures (y axis) vs time (x axis). my index contains a series of temperatures recorded at every 3sec time interval (this is what I want to show)
index=_* OR index=* source="live logs.zip:.\\tenant_1.tgz:.\\tenant_1/application_24978294676695149906/application.log" sourcetype="tenant_1/application_00247908011074894418/application" | eval TIME=strftime(timeStamp_Temperature, "%d-%m-%Y %H:%M:%S") |
TIME will convert my epoch time to time in "%d-%m-%Y %H:%M:%S" which is the label i need (with reference to ss-wrong.png - first picture's x axis)
Hence, I am not sure how to write the timechart query such that i can get temp vs time graph.
I tried timechart span=1h temperature_value by _time but it throws an error that I need to add an aggregate function before temperature_value field. Is there any way to not alter the temperature values from the indexed dataset but at the same time use timechart to show time labels on the x-axis?
Thank you!!!
... View more