Splunk Search

How to hide a field from the legend in a bar chart?



My current search I'm using to populate the value is given below.

source= transaction.csv    
| stats  values(AppName) as AppName, avg(Response_Time) as AverageResponseTime, max(Response_Time) as MaxResponseTime,
 min(Response_Time) as MinResponseTime   by custonernumber 
| table  custonernumber AppName  AverageResponseTime MaxResponseTime MinResponseTime | head 10

when i'm trying to show the data in bar chart, I'm getting legend names such as AppName AverageResponseTime MaxResponseTime MinResponseTime.
I want to hide or remove AppName from the legend in my bar chart, but I need to do it without removing AppName field from the search above.
I'm using that Appname field for a filter condition in my dashboard, so I cannot remove the Appname field from the above search.

Thanks in advance.


Tags (3)
0 Karma

Super Champion

hey @shankarananth

add this to dashboard XML

<option name="charting.legend.placement">none</option>

Let me know if it works!

0 Karma

New Member

can You please tell me how you achieved the answer? ,Can You please tell me how you acheived ?

0 Karma

Path Finder

Have you tried using fields?
Try appending:

| fields - AppName

You could probably also replace table with fields, something like:

| fields custonernumber AverageResponseTime MaxResponseTime MinResponseTime
0 Karma

Revered Legend

Are you using this search as base search? How are you adding filter and is it on other panels?

0 Karma


In other panels i can able to add it. because i am using the Appname field t be displayed in that chart else i'm displaying the data as statistics.

0 Karma



Thank you very much .

I achieved that approach in another way ..

0 Karma

New Member

May I know how you acheived Mr.Shankaranath?

0 Karma
Get Updates on the Splunk Community!

BSides Splunk 2022 - The Call for Papers is now Open!

TLDR; Main Site: https://bsidessplunk.com CFP Site: https://bsidessplunk.com/cfp CFP Opens: December 15th, ...

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...