Splunk Search

Can I sort the legend of a timechart by value instead of alphabetically?


The timechart is based on avg response time for webpages, but the legend lists the URL's in alphabetical order. Is there a way to have the legend order by value instead?

Tags (3)
0 Karma


The solution is explained on: http://docs.splunk.com/Documentation/Splunk/6.1.3/AdvancedDev/Chartcustomization

In my case, instead of legends A,B,C .. I just changed to B,C,A


0 Karma


@ tks that is useful

I just used this to have the legend appear in this order error,warn,info, so this is what you would do with whatever labels you are working for. It is very statis as I was looking for something more dynamic based on the values in the graph.
<option name="charting.legend.labels">[error,warn,info]</option>

Also I was looking at this, anyone know what this does?
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>

0 Karma

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...