Dashboards & Visualizations

How to create a bar chart with different colors and show as sorted?

wayne_test
Explorer

I'm trying to create a bar chart. But if I just do it by:

index="cn-*"
|top limit=5 SrcIP

The bar chart shows in just single color.

if I do it by:

index="cn-*"
|top limit=5 SrcIP
|eval temp=""
|xyseries temp SrcIP count

The bar chart shows in different colors. But the order seems not sorted by the count.

So, is there any way to create a bar chart with a different color and can it be sorted by the count? Also, I need drilldown at the bar chart.

0 Karma
1 Solution

niketn
Legend

@wayne_test try the following:

index="cn-*"
| top limit=5 SrcIP showperc=f
| fields - _*
| transpose header_field="SrcIP"
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

niketn
Legend

@wayne_test try the following:

index="cn-*"
| top limit=5 SrcIP showperc=f
| fields - _*
| transpose header_field="SrcIP"
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

wayne_test
Explorer

It works! Thanks.

Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...