Splunk Search

Panels displaying variable numerical value

hsh
New Member

I’m trying to create a panel that will display the numerical number for a field called method_duration.
For each event the value for method_duration would be something like :
method_duration=35454
method_duration=10
method_duration=5845
method_duration=30000
method_duration=30001
now what I would like is a graph that displays the method_duration on the x-axes and group them according to duration like this: 0-10000, 10000-50000.
If I used the 4 method_duration’s as describe above the graph would have
2 events within 0-10000 and 3 events within 10000-50000
The problem is that the search parameters I have used resulted in the duration periods were not in a numerical order on the x-axes.
The order would be:
0-10000
100000-110000
127000-128000
20000-30000
I only see this problem when there are a lot of results .
My search string look like: | chart count by method_duration span=10000
Any idea way that is ?

Tags (1)
0 Karma

hsh
New Member

Hi I found the answer in a previous post

https://answers.splunk.com/answers/119108/how-to-sort-as-numerals-the-x-axis-of-a-histogram.html

had to had sort to the search argument

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!