Are you a member of the Splunk Community?
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- How to swap X and Y axis?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have an area chart with Time_Taken on the x axis and count on the y axis and I want them to be switched, please help.
Thanks!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Assuming that all of your values on the existing X-axis ARE NUMBERS (this is a BIG "if"), just add this to the bottom of your existing search:
| untable _time Xaxis Yaxis
| xyseries _time Yaxis Xaxis
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Assuming that all of your values on the existing X-axis ARE NUMBERS (this is a BIG "if"), just add this to the bottom of your existing search:
| untable _time Xaxis Yaxis
| xyseries _time Yaxis Xaxis
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@bryceweb22 Can you share your chart command?You can use untable and xyseries command. This post may help.
https://answers.splunk.com/answers/477392/how-do-i-invert-the-x-and-y-axis-in-my-chart.html
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
| rex ".*\s(?P\d+)$$$$"
| chart count by Time_Taken span=16
| sort Time_Taken
This is what I have.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@bryceweb22 - You can simply change your visualization from column chart to bar chart, it will make time on y axis and count on x axis.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Well I have it as a area chart as of right now and I would prefer to keep it that way unless there is no way to swap their positions
Splunk Enterprise Security(ES) 7.3 is approaching the end of support. Get ready for ...
Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...
Splunk Observability for AI
