topic Re: how to add labels to chart values or order timechart in Splunk Search https://community.splunk.com/t5/Splunk-Search/how-to-add-labels-to-chart-values-or-order-timechart/m-p/106217#M27606 <P>Using timechart it's not possible as the values sorted will be distorting the time in the chart. Better use the stats function and do the calculation after the eval. Then apply the sort function. Thanks.</P> Thu, 25 Jul 2013 08:46:45 GMT linu1988 2013-07-25T08:46:45Z how to add labels to chart values or order timechart https://community.splunk.com/t5/Splunk-Search/how-to-add-labels-to-chart-values-or-order-timechart/m-p/106215#M27604 <P>Hello.<BR /> My query looks like <BR /> ...| timechart count by type<BR /> And I have values tupe_a, type_b and so on. When I call them like <BR /> eval name=case(type=type_a, "Error", type=type_b, "OK")...<BR /> and use "count by name" the rows in my staced timechart are ordered by name. But I need it to order by summary count. When I use "count by type" , they are ordered by summary count. How to specify the order or rename the types on the final chart?</P> Mon, 28 Sep 2020 14:25:52 GMT https://community.splunk.com/t5/Splunk-Search/how-to-add-labels-to-chart-values-or-order-timechart/m-p/106215#M27604 0range 2020-09-28T14:25:52Z Re: how to add labels to chart values or order timechart https://community.splunk.com/t5/Splunk-Search/how-to-add-labels-to-chart-values-or-order-timechart/m-p/106216#M27605 <P>If you just add a total row</P> <P>…|addcoltotals labelfield=name label=ALL</P> <P>name count<BR /> Error 10<BR /> OK 100<BR /> ALL 110</P> Thu, 25 Jul 2013 08:27:40 GMT https://community.splunk.com/t5/Splunk-Search/how-to-add-labels-to-chart-values-or-order-timechart/m-p/106216#M27605 HiroshiSatoh 2013-07-25T08:27:40Z Re: how to add labels to chart values or order timechart https://community.splunk.com/t5/Splunk-Search/how-to-add-labels-to-chart-values-or-order-timechart/m-p/106217#M27606 <P>Using timechart it's not possible as the values sorted will be distorting the time in the chart. Better use the stats function and do the calculation after the eval. Then apply the sort function. Thanks.</P> Thu, 25 Jul 2013 08:46:45 GMT https://community.splunk.com/t5/Splunk-Search/how-to-add-labels-to-chart-values-or-order-timechart/m-p/106217#M27606 linu1988 2013-07-25T08:46:45Z