Splunk Search

Panels displaying variable numerical value

hsh
New Member

I’m trying to create a panel that will display the numerical number for a field called method_duration.
For each event the value for method_duration would be something like :
method_duration=35454
method_duration=10
method_duration=5845
method_duration=30000
method_duration=30001
now what I would like is a graph that displays the method_duration on the x-axes and group them according to duration like this: 0-10000, 10000-50000.
If I used the 4 method_duration’s as describe above the graph would have
2 events within 0-10000 and 3 events within 10000-50000
The problem is that the search parameters I have used resulted in the duration periods were not in a numerical order on the x-axes.
The order would be:
0-10000
100000-110000
127000-128000
20000-30000
I only see this problem when there are a lot of results .
My search string look like: | chart count by method_duration span=10000
Any idea way that is ?

Tags (1)
0 Karma

hsh
New Member

Hi I found the answer in a previous post

https://answers.splunk.com/answers/119108/how-to-sort-as-numerals-the-x-axis-of-a-histogram.html

had to had sort to the search argument

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...