topic Re: How to hide "OTHER" job in Timechart in Dashboards & Visualizations

How to hide "OTHER" job in Timechart

aditsss — Mon, 24 May 2021 12:13:10 GMT

Hi Everyone,

I have created one Query:

The issue I am facing is I am getting jobs Trend but I am getting one more line as Other.

How we can hide that OTHER. Attached is the screenshot for the same.

Can someone please guide me.

Re: How to hide "OTHER" job in Timechart

ITWhisperer — Mon, 24 May 2021 12:22:56 GMT

Try the useother=f option on the timechart command

Re: How to hide "OTHER" job in Timechart

aditsss — Mon, 24 May 2021 12:24:52 GMT

@ITWhisperer

Can you tell me how to use that option in my query.

Re: How to hide "OTHER" job in Timechart

ITWhisperer — Mon, 24 May 2021 12:30:05 GMT

Re: How to hide "OTHER" job in Timechart

isoutamo — Mon, 24 May 2021 12:36:26 GMT

index=abc source="/splunkLogs/JOB_MDJX_CS_STATS_PLATINUM.csv" | join type=outer JOBFLOW_ID [ | inputlookup JOB_MDJX_CS_MASTER_E3.csv ] | eval fields=split(_raw,",") | eval Environment=mvindex(fields,11) | eval JOBFLOW_ID=mvindex(fields,0) | eval JOB_EXEC_TIME=mvindex(fields,8) | eval RunDate=mvindex(fields,3) | where Environment="E3" | where JOBFLOW_ID LIKE "%%" | eval RunDate="20".mvindex(fields,3) | fieldformat Run_Date=strftime(Run_Date,"%d/%b/%Y") | timechart useother=f sum(JOB_EXEC_TIME) as TotalExecTime by JOBFLOW_ID ``` If you want to see all values instead of some then use the below ``` ```| timechart limit=0 sum(JOB_EXEC_TIME) as TotalExecTime by JOBFLOW_ID ``` | eval TotalExecTime=round(TotalExecTime,2) | sort -TotalExecTime limit=10