Dashboards & Visualizations

single value trellis order by value with trendline

wjrbrady
Engager

I am trying to create a panel using trellis and want to have it order by lowest number and not alphabetically.
index=someindex
| bin span=5m _time
| stats count(eval(field1="false")) as error,count(eval(field1="true")) as success, count(field3) as total by _time sourcetype
| eval accuracy=round((success/total)*100,2)

 

after that point no matter what i try to do i cant get my lowest score to be the first item.  My sourcetype has about 40 items so want to see the worst behaving items first.

Labels (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @wjrbrady 

Ive tried and tried to do this but not had any success yet, I thought you could achieve this by somehow changing the field names to prefix with a numerical value to help sort them but using the table command just broke the trellis.

I will keep trying but ultimately there is no built-in way to achieve this unfortunately. I'll keep thinking though!

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma

wjrbrady
Engager

thank you i have tried that to.  It seems it would work if i did not want the trend line.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...