I have created a query which have 4 columns in statistics and want to show column chart as well but with 3 columns. how to remove extra column in statistics?
base search | stats total count(a) count(b) by Function
Statistics output is -->
Function Total count(a) count(b)
Test 10 6 4
but in chart i dont want to see column of total, only want to see count of a and b per function but dont want to remove it from statistics.
I am having the same issue. It looks simple enough that this should work but it doesn't. It still keeps TOTAL on my bar chart. It does, however, remove it from statistics table. This is what I am using. How can you remove TOTAL from the charts? I am running version 7.2.0.
... |fields - Total
harishalipaka's comment above should work if you add it to the end of your search. For more info on the fields command please see the docs at