<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Customize Parallel Coordinates visualization in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616766#M50643</link>
    <description>&lt;P&gt;Not sure if I understand the requirement, but why not do this&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| table product test count&lt;/LI-CODE&gt;</description>
    <pubDate>Wed, 12 Oct 2022 05:29:57 GMT</pubDate>
    <dc:creator>bowesmana</dc:creator>
    <dc:date>2022-10-12T05:29:57Z</dc:date>
    <item>
      <title>Is it possible to Customize Parallel Coordinates visualization?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616764#M50642</link>
      <description>&lt;P&gt;There is any possible way to sort the parrllel co-ordinates visualization.&lt;/P&gt;
&lt;P&gt;....| table count product test&lt;/P&gt;
&lt;P&gt;where count is a integer ( number).. In parallel coordinates visualization .&lt;/P&gt;
&lt;P&gt;The Number comes first follow by alphabets.&lt;/P&gt;
&lt;P&gt;3&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Alexa&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Ball&lt;/P&gt;
&lt;P&gt;Is there possible to make reverse the visualization format&lt;/P&gt;
&lt;P&gt;something like&lt;/P&gt;
&lt;P&gt;Alexa &amp;nbsp;&amp;nbsp; Ball &amp;nbsp; &amp;nbsp; &amp;nbsp;&amp;nbsp; 3&lt;/P&gt;</description>
      <pubDate>Wed, 12 Oct 2022 14:54:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616764#M50642</guid>
      <dc:creator>restinlinux</dc:creator>
      <dc:date>2022-10-12T14:54:30Z</dc:date>
    </item>
    <item>
      <title>Re: Customize Parallel Coordinates visualization</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616766#M50643</link>
      <description>&lt;P&gt;Not sure if I understand the requirement, but why not do this&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| table product test count&lt;/LI-CODE&gt;</description>
      <pubDate>Wed, 12 Oct 2022 05:29:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616766#M50643</guid>
      <dc:creator>bowesmana</dc:creator>
      <dc:date>2022-10-12T05:29:57Z</dc:date>
    </item>
    <item>
      <title>Re: Customize Parallel Coordinates visualization</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616773#M50644</link>
      <description>&lt;P&gt;Tried using table command to sort the visualization.&lt;/P&gt;&lt;P&gt;The required format is not reflect in Parallel Co ordinates visualization.&lt;/P&gt;&lt;P&gt;The numerical comes first , as before.&lt;/P&gt;</description>
      <pubDate>Wed, 12 Oct 2022 06:40:18 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616773#M50644</guid>
      <dc:creator>restinlinux</dc:creator>
      <dc:date>2022-10-12T06:40:18Z</dc:date>
    </item>
    <item>
      <title>Re: Customize Parallel Coordinates visualization</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616781#M50645</link>
      <description>&lt;P&gt;Odd, if I create 100 random rows with this example&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| makeresults count=100
| fields - _time
| eval count=random() % 10, product=mvindex(split("Alexa,Google,Siri", ","), random() % 3) , test=mvindex(split("Ball,Nest,Watch", ","), random() % 3)
| table product test count&lt;/LI-CODE&gt;&lt;P&gt;it generates a viz&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="bowesmana_0-1665559707750.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/21978i17EDF283F75A5960/image-size/medium?v=v2&amp;amp;px=400" role="button" title="bowesmana_0-1665559707750.png" alt="bowesmana_0-1665559707750.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;What's your SPL?&lt;/P&gt;</description>
      <pubDate>Wed, 12 Oct 2022 07:28:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616781#M50645</guid>
      <dc:creator>bowesmana</dc:creator>
      <dc:date>2022-10-12T07:28:43Z</dc:date>
    </item>
    <item>
      <title>Re: Customize Parallel Coordinates visualization</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616792#M50646</link>
      <description>&lt;P&gt;yeah its generates. but my table is ( |table 300 200 hi&amp;nbsp; ).&lt;/P&gt;&lt;P&gt;The viz comes in the format as&lt;/P&gt;&lt;P&gt;300&amp;nbsp;&amp;nbsp;&amp;nbsp; 200&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; hi&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; --- number first followed by alphabets....&lt;/P&gt;&lt;P&gt;but i want to sort the viz format something like hi&amp;nbsp; 200 300.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 12 Oct 2022 09:40:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616792#M50646</guid>
      <dc:creator>restinlinux</dc:creator>
      <dc:date>2022-10-12T09:40:22Z</dc:date>
    </item>
    <item>
      <title>Re: Customize Parallel Coordinates visualization</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616793#M50647</link>
      <description>&lt;P&gt;From my tests I think that this visualization does internal sorting of dimensions and you can't change it. Either parameters settable in the UI directly in visualization tab or XML-settable parameters contain anything about sorting. So yes, you can reorder the columns but you can't force any particular order within the columns.&lt;/P&gt;</description>
      <pubDate>Wed, 12 Oct 2022 09:50:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616793#M50647</guid>
      <dc:creator>PickleRick</dc:creator>
      <dc:date>2022-10-12T09:50:39Z</dc:date>
    </item>
    <item>
      <title>Re: Customize Parallel Coordinates visualization</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616805#M50649</link>
      <description>&lt;P&gt;Can you brief more how its possible to reorder the col of viz&amp;nbsp; by xml if possible.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 12 Oct 2022 11:28:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616805#M50649</guid>
      <dc:creator>restinlinux</dc:creator>
      <dc:date>2022-10-12T11:28:31Z</dc:date>
    </item>
    <item>
      <title>Re: Customize Parallel Coordinates visualization</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616817#M50653</link>
      <description>&lt;P&gt;It you provide column names in different order in your &lt;EM&gt;table&lt;/EM&gt; command, they will be ordered differently.&lt;/P&gt;&lt;P&gt;So if you do&lt;/P&gt;&lt;PRE&gt;| table count product test&lt;/PRE&gt;&lt;P&gt;You will have count column first, then product, then test.&lt;/P&gt;&lt;P&gt;If you do&lt;/P&gt;&lt;PRE&gt;| table test count product&lt;/PRE&gt;&lt;P&gt;The columns will be ordered differently.&lt;/P&gt;</description>
      <pubDate>Wed, 12 Oct 2022 12:38:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616817#M50653</guid>
      <dc:creator>PickleRick</dc:creator>
      <dc:date>2022-10-12T12:38:35Z</dc:date>
    </item>
    <item>
      <title>Re: Customize Parallel Coordinates visualization</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616893#M50657</link>
      <description>&lt;P&gt;What's your exact SPL for your table statement. The viz will generally honour the ordering specified in the table, but it seems sometimes it does not.&lt;/P&gt;&lt;P&gt;You can rename your fields, e.g. this appears to get changed in my test to 200, 300, hi&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| table 300 200 hi&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;but if you do this&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| rename 300 as e_300, 200 as e_200
| table e_300 e_200 hi&lt;/LI-CODE&gt;&lt;P&gt;it puts them in the order specified&lt;/P&gt;</description>
      <pubDate>Wed, 12 Oct 2022 21:33:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Is-it-possible-to-Customize-Parallel-Coordinates-visualization/m-p/616893#M50657</guid>
      <dc:creator>bowesmana</dc:creator>
      <dc:date>2022-10-12T21:33:58Z</dc:date>
    </item>
  </channel>
</rss>

