Dashboards & Visualizations

Ordering Chart's Bars

jsven7
Communicator

I'm charting disk space. Per host my chart has two bars that represent the instance (c: and d:). There is a space between each set that is like a visual delimiter for hosts.

index=os host="host1" OR host="host2" OR host="host3" object="LogicalDisk" counter="% Free Space" instance ="C:" OR instance ="D:" 
| eval percent_used=100-Value 
| chart latest(percent_used) by host, instance

How do I make the chart display a specified static order of hosts (pair of bars)?

Tags (1)
0 Karma

mayurr98
Super Champion

hey

have you tried looking at the visualisation for | chart latest(percent_used) over host by instance
Also try this

 index=os host="host1" OR host="host2" OR host="host3" object="LogicalDisk" counter="% Free Space" instance ="C:" OR instance ="D:" 
 | eval percent_used=100-Value 
 | stats  latest(percent_used) by host, instance | eval host=host." ".instance | fields- intance

let me know if this helps!

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...