Splunk Search

Can I sort the legend of a timechart by value instead of alphabetically?

richnavis
Contributor

The timechart is based on avg response time for webpages, but the legend lists the URL's in alphabetical order. Is there a way to have the legend order by value instead?

Tags (3)
0 Karma

fabiocaldas
Contributor

The solution is explained on: http://docs.splunk.com/Documentation/Splunk/6.1.3/AdvancedDev/Chartcustomization

In my case, instead of legends A,B,C .. I just changed to B,C,A

[B,C,A]

0 Karma

HattrickNZ
Motivator

@ tks that is useful

I just used this to have the legend appear in this order error,warn,info, so this is what you would do with whatever labels you are working for. It is very statis as I was looking for something more dynamic based on the values in the graph.
<option name="charting.legend.labels">[error,warn,info]</option>

Also I was looking at this, anyone know what this does?
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>

0 Karma

Moritz
Explorer
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Nested loops in Event Conversion

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...