topic Re: How do you change the legend value in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-do-you-change-the-legend-value/m-p/75664#M19132 <P>Yes you can, see below:</P> <PRE><CODE>your search | chart count(foo) as "Total Count of FOO" by bar </CODE></PRE> Fri, 22 Oct 2010 22:15:19 GMT ftk 2010-10-22T22:15:19Z How do you change the legend value https://community.splunk.com/t5/Splunk-Search/How-do-you-change-the-legend-value/m-p/75663#M19131 <P>Outside of renaming(aliasing) the actual field, can you also rename the entire content of the history for charting? (i.e. instead of count(field/alias), rename it to Total Count of FIELD).</P> Fri, 22 Oct 2010 21:53:11 GMT https://community.splunk.com/t5/Splunk-Search/How-do-you-change-the-legend-value/m-p/75663#M19131 BunnyHop 2010-10-22T21:53:11Z Re: How do you change the legend value https://community.splunk.com/t5/Splunk-Search/How-do-you-change-the-legend-value/m-p/75664#M19132 <P>Yes you can, see below:</P> <PRE><CODE>your search | chart count(foo) as "Total Count of FOO" by bar </CODE></PRE> Fri, 22 Oct 2010 22:15:19 GMT https://community.splunk.com/t5/Splunk-Search/How-do-you-change-the-legend-value/m-p/75664#M19132 ftk 2010-10-22T22:15:19Z