Dashboards & Visualizations

Rearranging the blocks of bar chart according to the customized order?

Vish
Explorer

Hi All, the below is a bar chart which has the ordered the blocks of bar chart according to alphabet but i want in this order pa , failed, aborted, not tested.

and also is it possible to rearrange like this in XML code itself ?

 

Vish_0-1688962446579.png

Labels (2)
0 Karma

yeahnah
Motivator

Hi @Vish 

The example you show is a column chart.  You can order the fields with the table command like this example

...your search...
| table _time pa failed aborted "not tested"


Note, field names are case sensitive so you'll need to change to match you result set.

Hope that helps

0 Karma

Vish
Explorer

The Above didnt work
 getting this as the output

Vish_0-1688974146791.png

 

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...