https://community.splunk.com/t5/Splunk-Search/help-on-basic-questions-in-a-timechart/m-p/397600#M190838 <P>timechart defaults to 10 values<BR /> use <CODE>limit=0 useother=false</CODE> in your timechart command to avoid the <CODE>OTHER</CODE> and to show all split by</P> Tue, 16 Jul 2019 12:14:04 GMT adonio 2019-07-16T12:14:04Z https://community.splunk.com/t5/Splunk-Search/help-on-basic-questions-in-a-timechart/m-p/397599#M190837 <P>hi</P> <P>I use the search below in order to display a timechart</P> <PRE><CODE>[| inputlookup host.csv | table host] `CPU` earliest=-3mon latest=now | bucket _time span=3m | where process_cpu_used_percent&gt;80 | lookup lookup_cmdb_fo_all.csv HOSTNAME as host output SITE | timechart avg(process_cpu_used_percent) as process_cpu_used_percent by host </CODE></PRE> <P>I have 2 questions<BR /> 1) As you can see, I display the host on the ordinate axis but I have an host called "Other" which correspond to nothing<BR /> Is there a solution to delete this one?<BR /> 2) I need to do a sort on process_cpu_used_percent in order to display the host where process_cpu_used_percent is higher<BR /> Where I have to place the sort command please??<BR /> Thanks </P> Wed, 30 Sep 2020 01:23:04 GMT https://community.splunk.com/t5/Splunk-Search/help-on-basic-questions-in-a-timechart/m-p/397599#M190837 jip31 2020-09-30T01:23:04Z https://community.splunk.com/t5/Splunk-Search/help-on-basic-questions-in-a-timechart/m-p/397600#M190838 <P>timechart defaults to 10 values<BR /> use <CODE>limit=0 useother=false</CODE> in your timechart command to avoid the <CODE>OTHER</CODE> and to show all split by</P> Tue, 16 Jul 2019 12:14:04 GMT https://community.splunk.com/t5/Splunk-Search/help-on-basic-questions-in-a-timechart/m-p/397600#M190838 adonio 2019-07-16T12:14:04Z