Splunk Search

Sort Fields in Charts

wyang6
Path Finder

I have the following chart:

City/Day | Friday | Monday | Thursday | Tuesday | Wednesday

Chicago  | Yes    | Yes    | No       | Yes     | Yes

Dallas   | No     | Yes    | No       | No      | No

New York | No     | No     | Yes      | No      | Yes

How do I sort or re-organize the columns such that it's not in alphabetical order. i.e.:

City/Day | Monday | Tuesday | Wednesday | Thursday | Friday

Chicago  | Yes    | Yes     | Yes       | No       | Yes

Dallas   | Yes    | No      | No        | No       | No

New York | No     | No      | Yes       | Yes      | No

Thank you!

Tags (2)
1 Solution

Stephen_Sorkin
Splunk Employee
Splunk Employee

To reorder fields here, use the "fields" command:

... | fields "City/Day" Monday Tuesday Wednesday Thursday Friday

View solution in original post

wyang6
Path Finder

I typed with the "space" and "vertical bar" character on the keyboard. If you meant in Splunk, I just used the commands below.

0 Karma

Stephen_Sorkin
Splunk Employee
Splunk Employee

To reorder fields here, use the "fields" command:

... | fields "City/Day" Monday Tuesday Wednesday Thursday Friday

Genti
Splunk Employee
Splunk Employee

how did you produce the above chart?

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...