topic how to align values on X-axis in Splunk Dev

how to align values on X-axis

krishna1 — Thu, 08 Feb 2024 05:14:49 GMT

Iam trying to align values on X-axis in this order : ">3 days" ">5 days" ">15 days" ">30 days" ">100 days"
I have tried table command but its not giving me the expected output.

query:
|inputlookup acn_ticket_unresolved_dessertholdings_kv
| eval age=((now() - epoc_time_submitted)/86400),total_age=round(age,2)
|rangemap field=total_age ">3 days"=0-3.00 ">5 days"=3.01-15.00 ">15 days"=15.01-30.00 ">30 days"=30.01-100.00 ">100 days"=100.01-1000.00
| chart count as count1 over range by priority | rename priority as Priority

Re: how to align values on X-axis

ITWhisperer — Thu, 08 Feb 2024 09:21:41 GMT

The chart command will sort string lexicographically, so change your range map to deliver numbers (3, 5, 15, 30, 100), then convert to strings after the chart command

|inputlookup acn_ticket_unresolved_dessertholdings_kv | eval age=((now() - epoc_time_submitted)/86400),total_age=round(age,2) |rangemap field=total_age "3"=0-3.00 "5"=3.01-15.00 "15"=15.01-30.00 "30"=30.01-100.00 "100"=100.01-1000.00 | chart count as count1 over range by priority | eval range=">".range." days" | rename priority as Priority