Dashboards & Visualizations

Rearranging the blocks of bar chart according to the customized order?

Vish
Explorer

Hi All, the below is a bar chart which has the ordered the blocks of bar chart according to alphabet but i want in this order pa , failed, aborted, not tested.

and also is it possible to rearrange like this in XML code itself ?

 

Vish_0-1688962446579.png

Labels (2)
0 Karma

yeahnah
Motivator

Hi @Vish 

The example you show is a column chart.  You can order the fields with the table command like this example

...your search...
| table _time pa failed aborted "not tested"


Note, field names are case sensitive so you'll need to change to match you result set.

Hope that helps

0 Karma

Vish
Explorer

The Above didnt work
 getting this as the output

Vish_0-1688974146791.png

 

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...