Splunk Search

How do I change the label of the x-axis on a chart?

Hppjet
Path Finder

alt text

index="all_eqt" Plant=15 ProcessCode=T DefectCode="*" MachineNumber<26 | stats sum(TotalSquareYards) as "Total Square Yards" by DefectCode

How do I change the x-axis "TA" label to display "styles" instead?

0 Karma
1 Solution

Sukisen1981
Champion

if you want to change the x axis label , which probably is coming as 'DefectCode' you just can edit the chart type and put a custom x axis label to TA. Visualization > Format > X Axis > Ttile > Custom > (your label.)
However, I think the DefectCode field value is TA which you want to rename as Styles
For this you need to :
|eval DefectCode=if(DefectCode="TA","Styles",DefectCode) BEFORE the stats command.
Now, if you have other DefectCode types you need to append the labels you want after the last , in the if statement

View solution in original post

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

Recent thread on this topic here

0 Karma

Sukisen1981
Champion

if you want to change the x axis label , which probably is coming as 'DefectCode' you just can edit the chart type and put a custom x axis label to TA. Visualization > Format > X Axis > Ttile > Custom > (your label.)
However, I think the DefectCode field value is TA which you want to rename as Styles
For this you need to :
|eval DefectCode=if(DefectCode="TA","Styles",DefectCode) BEFORE the stats command.
Now, if you have other DefectCode types you need to append the labels you want after the last , in the if statement

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...