https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/292445#M18572 <P>The way to do it is by prepending a series of leading white space which will pull those values to the top/left. Assuming that you have (or can create) a field named <CODE>severity</CODE> where the higher the number, the worse it is, you can use code like this:</P> <PRE><CODE>... | rename COMMENT AS "Pad with spaces to ensure that the metrics with the worst value show up first on the trellis!" | eval YourTrellisFIeldNameHere = printf("%*s", len(YourTrellisFIeldNameHere) + severity, YourTrellisFIeldNameHere) </CODE></PRE> Mon, 30 Dec 2019 16:19:34 GMT woodcock 2019-12-30T16:19:34Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/292443#M18570 <P>I am trying to sort the trellis boxes(single values) based on the value within them, not alphabetically. I'm unable to change the order of the boxes when i sort by any field.</P> <P>Current:<BR /> A B C<BR /> 3 1 9</P> <P>Desired:<BR /> B A C<BR /> 1 3 9</P> <P>The issue may be related to SPL-142769 from: <A href="https://answers.splunk.com/answers/564804/how-can-i-change-the-sort-order-of-data-in-a-trell.html">https://answers.splunk.com/answers/564804/how-can-i-change-the-sort-order-of-data-in-a-trell.html</A></P> <P>I was unable to find this issue. Anyone with a similar experience?</P> Mon, 26 Mar 2018 19:55:30 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/292443#M18570 timmym123 2018-03-26T19:55:30Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/292444#M18571 <P>SPL-142769 is indeed the correct reference for this, to be able to sort the trellis layout. <BR /> This is a still outstanding request at the moment.</P> Tue, 17 Apr 2018 12:40:12 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/292444#M18571 mhoogcarspel_sp 2018-04-17T12:40:12Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/292445#M18572 <P>The way to do it is by prepending a series of leading white space which will pull those values to the top/left. Assuming that you have (or can create) a field named <CODE>severity</CODE> where the higher the number, the worse it is, you can use code like this:</P> <PRE><CODE>... | rename COMMENT AS "Pad with spaces to ensure that the metrics with the worst value show up first on the trellis!" | eval YourTrellisFIeldNameHere = printf("%*s", len(YourTrellisFIeldNameHere) + severity, YourTrellisFIeldNameHere) </CODE></PRE> Mon, 30 Dec 2019 16:19:34 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/292445#M18572 woodcock 2019-12-30T16:19:34Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/292446#M18573 <P>@timmym123, please come back and try this, it will work!</P> Mon, 30 Dec 2019 16:21:03 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/292446#M18573 woodcock 2019-12-30T16:21:03Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/548228#M37723 <P>Can you please give a more detailed example, I am trying to use it with no sucess.</P> Fri, 16 Apr 2021 14:44:29 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/548228#M37723 marcos_eng1 2021-04-16T14:44:29Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/696940#M57126 <P>This worked smooth:</P><P>| stats max(avg_io_wait_time) as avg_io_wait_time by host<BR />| sort avg_io_wait_time<BR />| streamstats c as severity<BR />| eval host = printf("%*s", len(host) + severity, host)<BR />| stats max(avg_io_wait_time) as avg_io_wait_time by host</P><P>&nbsp;</P><P>&nbsp;</P> Wed, 21 Aug 2024 09:28:29 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/696940#M57126 jokertothequinn 2024-08-21T09:28:29Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/696941#M57127 <P><SPAN>| stats max(avg_io_wait_time) as avg_io_wait_time by host</SPAN><BR /><SPAN>| sort avg_io_wait_time</SPAN><BR /><SPAN>| streamstats c as severity</SPAN><BR /><SPAN>| eval host = printf("%*s", len(host) + severity, host)</SPAN><BR /><SPAN>| stats max(avg_io_wait_time) as avg_io_wait_time by host</SPAN></P> Wed, 21 Aug 2024 09:29:58 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-sort-on-single-value-in-trellis/m-p/696941#M57127 jokertothequinn 2024-08-21T09:29:58Z