Dashboards & Visualizations

Rearranging the blocks of bar chart according to the customized order?

Vish
Explorer

Hi All, the below is a bar chart which has the ordered the blocks of bar chart according to alphabet but i want in this order pa , failed, aborted, not tested.

and also is it possible to rearrange like this in XML code itself ?

 

Vish_0-1688962446579.png

Labels (2)
0 Karma

yeahnah
Motivator

Hi @Vish 

The example you show is a column chart.  You can order the fields with the table command like this example

...your search...
| table _time pa failed aborted "not tested"


Note, field names are case sensitive so you'll need to change to match you result set.

Hope that helps

0 Karma

Vish
Explorer

The Above didnt work
 getting this as the output

Vish_0-1688974146791.png

 

0 Karma
Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...