https://community.splunk.com/t5/Splunk-Search/How-to-change-the-order-of-fields-when-chart-is-used/m-p/563101#M196190 <P>If I understand your question correctly, fields are displayed in the order which you define them.<BR />So if you use this for example:</P><LI-CODE lang="markup">| fields Total 194.* *.*.*.* type _time</LI-CODE><P>&nbsp;<BR />Then you'll see Total displayed first and _time last.</P> Thu, 12 Aug 2021 16:50:08 GMT codebuilder 2021-08-12T16:50:08Z https://community.splunk.com/t5/Splunk-Search/How-to-change-the-order-of-fields-when-chart-is-used/m-p/563031#M196160 <P>index="www1" sourcetype="access_combined_wcookie" action=* status&lt;=400<BR />| timechart span=1d count(action) by clientip useother=f<BR />| addtotals<BR />| eval type = if(Total&gt;90 ,"UP","DOWN")<BR />| fields _time 194.* *.*.*.* Total type<BR />| sort - _time</P><P>&nbsp;</P><P><SPAN>I want to change the order of the x-axis field names when using it. </SPAN><BR /><SPAN>| fields _time 194.* *.*.*.* Total type &nbsp; Is there any other way than this?</SPAN></P> Thu, 12 Aug 2021 07:29:45 GMT https://community.splunk.com/t5/Splunk-Search/How-to-change-the-order-of-fields-when-chart-is-used/m-p/563031#M196160 nnonm111 2021-08-12T07:29:45Z https://community.splunk.com/t5/Splunk-Search/How-to-change-the-order-of-fields-when-chart-is-used/m-p/563101#M196190 <P>If I understand your question correctly, fields are displayed in the order which you define them.<BR />So if you use this for example:</P><LI-CODE lang="markup">| fields Total 194.* *.*.*.* type _time</LI-CODE><P>&nbsp;<BR />Then you'll see Total displayed first and _time last.</P> Thu, 12 Aug 2021 16:50:08 GMT https://community.splunk.com/t5/Splunk-Search/How-to-change-the-order-of-fields-when-chart-is-used/m-p/563101#M196190 codebuilder 2021-08-12T16:50:08Z