How to group "OTHERS" in a chart or stats command?

[HeinzWaescher]

Hi,

how can I show up the top10 results and the rest as OTHERS in a chart or stats command?

Like it can be done in a timechart:
sourcetype=data
| timechart span=1d count BY event_name limit=10

I tried out useother=t, but without success

BR

Heinz

[schose]

Hi,

is this what you want?! works find for me:

index=_internal | timechart limit=5 useother=t count by host

[HeinzWaescher]

No, I would like to have something like this:

index=_internal | chart limit=5 useother=t count by host