Splunk Search

Can I sort the legend of a timechart by value instead of alphabetically?

richnavis
Contributor

The timechart is based on avg response time for webpages, but the legend lists the URL's in alphabetical order. Is there a way to have the legend order by value instead?

Tags (3)
0 Karma

fabiocaldas
Contributor

The solution is explained on: http://docs.splunk.com/Documentation/Splunk/6.1.3/AdvancedDev/Chartcustomization

In my case, instead of legends A,B,C .. I just changed to B,C,A

[B,C,A]

0 Karma

HattrickNZ
Motivator

@ tks that is useful

I just used this to have the legend appear in this order error,warn,info, so this is what you would do with whatever labels you are working for. It is very statis as I was looking for something more dynamic based on the values in the graph.
<option name="charting.legend.labels">[error,warn,info]</option>

Also I was looking at this, anyone know what this does?
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>

0 Karma

Moritz
Explorer
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...