Splunk Search

Panels displaying variable numerical value

hsh
New Member

I’m trying to create a panel that will display the numerical number for a field called method_duration.
For each event the value for method_duration would be something like :
method_duration=35454
method_duration=10
method_duration=5845
method_duration=30000
method_duration=30001
now what I would like is a graph that displays the method_duration on the x-axes and group them according to duration like this: 0-10000, 10000-50000.
If I used the 4 method_duration’s as describe above the graph would have
2 events within 0-10000 and 3 events within 10000-50000
The problem is that the search parameters I have used resulted in the duration periods were not in a numerical order on the x-axes.
The order would be:
0-10000
100000-110000
127000-128000
20000-30000
I only see this problem when there are a lot of results .
My search string look like: | chart count by method_duration span=10000
Any idea way that is ?

Tags (1)
0 Karma

hsh
New Member

Hi I found the answer in a previous post

https://answers.splunk.com/answers/119108/how-to-sort-as-numerals-the-x-axis-of-a-histogram.html

had to had sort to the search argument

0 Karma
Get Updates on the Splunk Community!

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...