How do you rename the value "other(n)" to "OTHERS"...

Splunk Search

How do I rename the value "other(n)" to "OTHERS" in a pie chart after the stats command?

@Nadhiyaa

you can use |rename "other(n)" with "OTHERS"
or

|eval OTHERS=other(n)

Thanks
Harish

Get Updates on the Splunk Community!

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members! The ...

Join the Conversation