How can I show results from Other?

[rtmcdonald]

When I create a chart it takes the bottom results and creates a category called Other. I want to show the results that are being lumped into other. How can I do that?

Thanks,

-Ryan

[ftk]

Since you indicated that christopherutz's answer did indeed answer your question, please accept his answer by clicking the green checkmark next to it so this question can be closed out. Thanks

[christopherutz]

Try

... | chart limit=0 ...

This is how I eliminate the aggregation of classes into an "other" category with timechart.

[rtmcdonald]

That worked! Thanks....

[christopherutz]

Note. There was at one point (possibly still) a bug when using limit=0. If you run into an issue with an extra column check out this question.

http://answers.splunk.com/questions/4638/timechart-and-chart-display-buggy-column-count-when-using-l...

[jhodges]

add the useother paramter:

chart useother=0

[rtmcdonald]

It looks like that just hides the column