https://community.splunk.com/t5/Dashboards-Visualizations/Adjusting-the-x-axis-on-chart-count/m-p/380200#M42615 <P>Like this:</P> <PRE><CODE>index=_* sourcetype!=audittrail | stats count BY log_level | eval _log_level = case( log_level=="INFO", 0, log_level=="WARN", 1, log_level=="ERROR", 2, log_level=="MAJOR", 3, log_level=="MINOR", 4, log_level=="CRITICAL", 5) | sort 0 _log_level </CODE></PRE> Wed, 13 Feb 2019 00:25:58 GMT woodcock 2019-02-13T00:25:58Z https://community.splunk.com/t5/Dashboards-Visualizations/Adjusting-the-x-axis-on-chart-count/m-p/380199#M42614 <P>I'm using | chart count over severity by technique to display events by level of severity <BR /> Currently I am not getting severity in order from Highest to Lowest on the x-axis where the order is off in the column chart visualization<BR /> I've also tried <BR /> | stats count by severity technique </P> <P>What would be an effective way to have these order correctly? <BR /> Thanks in advance!</P> Tue, 12 Feb 2019 21:45:48 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Adjusting-the-x-axis-on-chart-count/m-p/380199#M42614 dannyzen 2019-02-12T21:45:48Z https://community.splunk.com/t5/Dashboards-Visualizations/Adjusting-the-x-axis-on-chart-count/m-p/380200#M42615 <P>Like this:</P> <PRE><CODE>index=_* sourcetype!=audittrail | stats count BY log_level | eval _log_level = case( log_level=="INFO", 0, log_level=="WARN", 1, log_level=="ERROR", 2, log_level=="MAJOR", 3, log_level=="MINOR", 4, log_level=="CRITICAL", 5) | sort 0 _log_level </CODE></PRE> Wed, 13 Feb 2019 00:25:58 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Adjusting-the-x-axis-on-chart-count/m-p/380200#M42615 woodcock 2019-02-13T00:25:58Z https://community.splunk.com/t5/Dashboards-Visualizations/Adjusting-the-x-axis-on-chart-count/m-p/380201#M42616 <P>Thank you! this is great </P> Wed, 13 Feb 2019 06:34:11 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Adjusting-the-x-axis-on-chart-count/m-p/380201#M42616 dannyzen 2019-02-13T06:34:11Z