SPL
Rename _time field in a TimeChart
Description
When running a timechart splunk search query you may wish to rename the field _time. In order to do this you must first save the search to a dashboard or report. Once saved edit the source and add the following in the panel:
6 1
<option name="charting.axisTitleX.text">Date</option>This can be added right before the closing "</chart>" code.
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.