https://community.splunk.com/t5/Dashboards-Visualizations/replacing-host-values-in-a-chart/m-p/101748#M5696 <P>You might consider doing a lookup on HOST? </P> Fri, 19 Apr 2013 18:49:28 GMT bigtyma 2013-04-19T18:49:28Z https://community.splunk.com/t5/Dashboards-Visualizations/replacing-host-values-in-a-chart/m-p/101746#M5694 <P>Hi,</P> <P>I have a chart that works, but mgmt wants the host values to map to something more meaningful. Is there a way to do this? </P> <P>My search is this:</P> <P>index=coreops sourcetype=snmpinfo source="/usr/local/nsmutils/varlog/splunk_cgk_sessions.log" | head 9 | chart sum(CONNECTIONS) as CONNECTIONS by HOST | eval H=HOST | eval HOST="" | xyseries HOST H CONNECTIONS</P> Mon, 28 Sep 2020 13:45:58 GMT https://community.splunk.com/t5/Dashboards-Visualizations/replacing-host-values-in-a-chart/m-p/101746#M5694 a212830 2020-09-28T13:45:58Z https://community.splunk.com/t5/Dashboards-Visualizations/replacing-host-values-in-a-chart/m-p/101747#M5695 <P>Well how would you define "useful" in your scenario?</P> Fri, 19 Apr 2013 18:35:12 GMT https://community.splunk.com/t5/Dashboards-Visualizations/replacing-host-values-in-a-chart/m-p/101747#M5695 Ayn 2013-04-19T18:35:12Z https://community.splunk.com/t5/Dashboards-Visualizations/replacing-host-values-in-a-chart/m-p/101748#M5696 <P>You might consider doing a lookup on HOST? </P> Fri, 19 Apr 2013 18:49:28 GMT https://community.splunk.com/t5/Dashboards-Visualizations/replacing-host-values-in-a-chart/m-p/101748#M5696 bigtyma 2013-04-19T18:49:28Z https://community.splunk.com/t5/Dashboards-Visualizations/replacing-host-values-in-a-chart/m-p/101749#M5697 <P>lookup worked. The customer didn't like the name of the hosts, so we mapped it via a lookup.</P> Sat, 20 Apr 2013 00:50:44 GMT https://community.splunk.com/t5/Dashboards-Visualizations/replacing-host-values-in-a-chart/m-p/101749#M5697 a212830 2013-04-20T00:50:44Z