Splunk Search

Sort Fields in Charts

wyang6
Path Finder

I have the following chart:

City/Day | Friday | Monday | Thursday | Tuesday | Wednesday

Chicago  | Yes    | Yes    | No       | Yes     | Yes

Dallas   | No     | Yes    | No       | No      | No

New York | No     | No     | Yes      | No      | Yes

How do I sort or re-organize the columns such that it's not in alphabetical order. i.e.:

City/Day | Monday | Tuesday | Wednesday | Thursday | Friday

Chicago  | Yes    | Yes     | Yes       | No       | Yes

Dallas   | Yes    | No      | No        | No       | No

New York | No     | No      | Yes       | Yes      | No

Thank you!

Tags (2)
1 Solution

Stephen_Sorkin
Splunk Employee
Splunk Employee

To reorder fields here, use the "fields" command:

... | fields "City/Day" Monday Tuesday Wednesday Thursday Friday

View solution in original post

wyang6
Path Finder

I typed with the "space" and "vertical bar" character on the keyboard. If you meant in Splunk, I just used the commands below.

0 Karma

Stephen_Sorkin
Splunk Employee
Splunk Employee

To reorder fields here, use the "fields" command:

... | fields "City/Day" Monday Tuesday Wednesday Thursday Friday

Genti
Splunk Employee
Splunk Employee

how did you produce the above chart?

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...