https://community.splunk.com/t5/Splunk-Search/chart-query/m-p/57347#M13990 <P>You can do:</P> <PRE><CODE>index=test | stats count(_raw) as topHostnames by Hostname | sort - topHostnames </CODE></PRE> Fri, 12 Aug 2011 14:52:58 GMT Greg_LeBlanc 2011-08-12T14:52:58Z https://community.splunk.com/t5/Splunk-Search/chart-query/m-p/57346#M13989 <P>The following query </P> <P>index=test | top Hostname</P> <P>produces a chart that has percentages included in the chart along with the top hostnames. How do I not include the percentages in the chart? I do not want percentages in the chart.</P> Fri, 12 Aug 2011 14:20:37 GMT https://community.splunk.com/t5/Splunk-Search/chart-query/m-p/57346#M13989 DTERM 2011-08-12T14:20:37Z https://community.splunk.com/t5/Splunk-Search/chart-query/m-p/57347#M13990 <P>You can do:</P> <PRE><CODE>index=test | stats count(_raw) as topHostnames by Hostname | sort - topHostnames </CODE></PRE> Fri, 12 Aug 2011 14:52:58 GMT https://community.splunk.com/t5/Splunk-Search/chart-query/m-p/57347#M13990 Greg_LeBlanc 2011-08-12T14:52:58Z https://community.splunk.com/t5/Splunk-Search/chart-query/m-p/57348#M13991 <P>The showperc modifier to the top command is what you want. Here is how you use it:</P> <PRE><CODE>index=test | top showperc=false Hostname </CODE></PRE> Fri, 12 Aug 2011 19:44:01 GMT https://community.splunk.com/t5/Splunk-Search/chart-query/m-p/57348#M13991 ahall_splunk 2011-08-12T19:44:01Z