Dashboards & Visualizations

Ordering Chart's Bars

jsven7
Communicator

I'm charting disk space. Per host my chart has two bars that represent the instance (c: and d:). There is a space between each set that is like a visual delimiter for hosts.

index=os host="host1" OR host="host2" OR host="host3" object="LogicalDisk" counter="% Free Space" instance ="C:" OR instance ="D:" 
| eval percent_used=100-Value 
| chart latest(percent_used) by host, instance

How do I make the chart display a specified static order of hosts (pair of bars)?

Tags (1)
0 Karma

mayurr98
Super Champion

hey

have you tried looking at the visualisation for | chart latest(percent_used) over host by instance
Also try this

 index=os host="host1" OR host="host2" OR host="host3" object="LogicalDisk" counter="% Free Space" instance ="C:" OR instance ="D:" 
 | eval percent_used=100-Value 
 | stats  latest(percent_used) by host, instance | eval host=host." ".instance | fields- intance

let me know if this helps!

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...