Splunk Search

Panels displaying variable numerical value

hsh
New Member

I’m trying to create a panel that will display the numerical number for a field called method_duration.
For each event the value for method_duration would be something like :
method_duration=35454
method_duration=10
method_duration=5845
method_duration=30000
method_duration=30001
now what I would like is a graph that displays the method_duration on the x-axes and group them according to duration like this: 0-10000, 10000-50000.
If I used the 4 method_duration’s as describe above the graph would have
2 events within 0-10000 and 3 events within 10000-50000
The problem is that the search parameters I have used resulted in the duration periods were not in a numerical order on the x-axes.
The order would be:
0-10000
100000-110000
127000-128000
20000-30000
I only see this problem when there are a lot of results .
My search string look like: | chart count by method_duration span=10000
Any idea way that is ?

Tags (1)
0 Karma

hsh
New Member

Hi I found the answer in a previous post

https://answers.splunk.com/answers/119108/how-to-sort-as-numerals-the-x-axis-of-a-histogram.html

had to had sort to the search argument

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...