You can display the counts by editing your search string. For example, if you want to show the count of each "
ServerIP", you can do this:
... | stats count by ServerIP | sort -count | eval ServerIP=ServerIP." (".count.")"
which results in the counts being displayed in parentheses next to their values.
They are visible as tool tip. If you want to update the label shown on the chart, you need to update your search. See this for reference.
Hi @AndyMarr, did you mean you accidentally upvoted it, or the answer is a mistake? Let us know so we can make sure the Answers forum is useful for our community members and so members don't lose points after giving working answers from being downvoted.
Thanks for the clarification. Just so you know-- when you downvote it takes away karma points from your own profile and from the user you downvote, so please use that feature judiciously for posts you come across that include poor etiquette or incorrect/ misleading answers/content. We have a karma points contest going on, so every point counts. Happy Splunking!