<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to order the bars within each time segment of a timechart (bar style) by the sum of the field from largest to smallest? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-order-the-bars-within-each-time-segment-of-a-timechart/m-p/162838#M46228</link>
    <description>&lt;P&gt;I am trying to order the bars within each time segment from largest to smallest?&lt;BR /&gt;
is there a way of doing it?&lt;/P&gt;</description>
    <pubDate>Thu, 06 Aug 2015 17:01:59 GMT</pubDate>
    <dc:creator>antonyhan</dc:creator>
    <dc:date>2015-08-06T17:01:59Z</dc:date>
    <item>
      <title>How to order the bars within each time segment of a timechart (bar style) by the sum of the field from largest to smallest?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-order-the-bars-within-each-time-segment-of-a-timechart/m-p/162838#M46228</link>
      <description>&lt;P&gt;I am trying to order the bars within each time segment from largest to smallest?&lt;BR /&gt;
is there a way of doing it?&lt;/P&gt;</description>
      <pubDate>Thu, 06 Aug 2015 17:01:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-order-the-bars-within-each-time-segment-of-a-timechart/m-p/162838#M46228</guid>
      <dc:creator>antonyhan</dc:creator>
      <dc:date>2015-08-06T17:01:59Z</dc:date>
    </item>
    <item>
      <title>Re: How to order the bars within each time segment of a timechart (bar style) by the sum of the field from largest to smallest?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-order-the-bars-within-each-time-segment-of-a-timechart/m-p/162839#M46229</link>
      <description>&lt;P&gt;Could you explain more about expected output by some sample values?&lt;/P&gt;</description>
      <pubDate>Thu, 06 Aug 2015 19:53:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-order-the-bars-within-each-time-segment-of-a-timechart/m-p/162839#M46229</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2015-08-06T19:53:02Z</dc:date>
    </item>
    <item>
      <title>Re: How to order the bars within each time segment of a timechart (bar style) by the sum of the field from largest to smallest?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-order-the-bars-within-each-time-segment-of-a-timechart/m-p/162840#M46230</link>
      <description>&lt;P&gt;This may not be helpful, but I would strongly advise against doing this. Having the bars potentially change order with every time-slice would make the overall presentation confusing and difficult to parse. &lt;/P&gt;</description>
      <pubDate>Thu, 06 Aug 2015 21:23:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-order-the-bars-within-each-time-segment-of-a-timechart/m-p/162840#M46230</guid>
      <dc:creator>emiller42</dc:creator>
      <dc:date>2015-08-06T21:23:35Z</dc:date>
    </item>
    <item>
      <title>Re: How to order the bars within each time segment of a timechart (bar style) by the sum of the field from largest to smallest?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-order-the-bars-within-each-time-segment-of-a-timechart/m-p/162841#M46231</link>
      <description>&lt;P&gt;you got a point! it's a customer request and I couldn't figure out a solution.&lt;BR /&gt;
is there a way to do with just regular chart?&lt;/P&gt;</description>
      <pubDate>Fri, 07 Aug 2015 12:43:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-order-the-bars-within-each-time-segment-of-a-timechart/m-p/162841#M46231</guid>
      <dc:creator>antonyhan</dc:creator>
      <dc:date>2015-08-07T12:43:15Z</dc:date>
    </item>
    <item>
      <title>Re: How to order the bars within each time segment of a timechart (bar style) by the sum of the field from largest to smallest?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-order-the-bars-within-each-time-segment-of-a-timechart/m-p/162842#M46232</link>
      <description>&lt;P&gt;say with in 5 mins we have A100, B 1000, C 50. right now plain vanilla timechart with bar will order by legend name. Instead of the order of A B C, we would like to see an order of BAC from top to bottom as B has the largest value. Hope this explains.&lt;/P&gt;</description>
      <pubDate>Fri, 07 Aug 2015 12:45:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-order-the-bars-within-each-time-segment-of-a-timechart/m-p/162842#M46232</guid>
      <dc:creator>antonyhan</dc:creator>
      <dc:date>2015-08-07T12:45:59Z</dc:date>
    </item>
    <item>
      <title>Re: How to order the bars within each time segment of a timechart (bar style) by the sum of the field from largest to smallest?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-order-the-bars-within-each-time-segment-of-a-timechart/m-p/162843#M46233</link>
      <description>&lt;P&gt;timechart will not be able to do this. Just plain stats would help you with ordering based on values, but will not have _time in this case:&lt;/P&gt;

&lt;P&gt;sourcetype=test2| stats sum(Count) as Count by Name| sort - Count&lt;/P&gt;

&lt;P&gt;Data:&lt;BR /&gt;
Name,Count&lt;BR /&gt;
A,100&lt;BR /&gt;
B,1000&lt;BR /&gt;
C,10&lt;/P&gt;</description>
      <pubDate>Tue, 11 Aug 2015 06:17:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-order-the-bars-within-each-time-segment-of-a-timechart/m-p/162843#M46233</guid>
      <dc:creator>meenal901</dc:creator>
      <dc:date>2015-08-11T06:17:50Z</dc:date>
    </item>
  </channel>
</rss>

