Dashboards & Visualizations

How to display only a certain field in a visualization?

Path Finder

We have data on usage of particular hosts & addtotals. Out of that, we want to represent only the addtotals and not the individual usage of hosts in a visualization. Is there any method of representing only the addtotals in the visualization instead of all the values?

0 Karma


Use the table or fields command to only keep the fields you are interested in. For example,

.... | timechart count by host | addtotals | table _time Total
0 Karma
Get Updates on the Splunk Community!

Get ready to show some Splunk Certification swagger at .conf24!

Dive into the deep end of data by earning a Splunk Certification at .conf24. We're enticing you again this ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Now On-Demand Join us to learn more about how you can leverage Service Level Objectives (SLOs) and the new ...

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...