Splunk Search

Values on the bar chart

vishmehra
New Member

Can we add the values to the bar chart items that have been plotted?

Tags (2)
0 Karma

siddhu_93
Engager

Now it is easy to show this in Splunk 6.3
In visualization
Select Format > General > Show Data Values > On

0 Karma

demkic
Explorer

I have a bar chart (displaying volume) with an overlay line chart (displaying percentages). Am I able to "show data values" on just the overlay line chart (not on both)? Thank you!

0 Karma

mcfabrero_acn
Explorer

Hello @demkic,
I was also looking for a solution on this, do you have any updates?
It would be a great help!

Thanks!

0 Karma

somesoni2
Revered Legend

I don't think there is a way to get data values as label against the bar (I may be wrong). Apart from using suggestion from aholzer, your can show count in the y-axis (workaround). See if that is acceptable in your situation.

....<your search using chart/stats like count by somefield> | eval somefield=somefield."-".count

This will show values in the y-axis like somefieldVal1-50000, somefieldVal2-5000, somefieldVal3-22.

aholzer
Motivator

Change your y-axis to use Log graphing rather than Linear.

That should help you significantly.

vishmehra
New Member

I have three bars in the bar chart with values 50K, 5K and 22 for example. When I plot these, the bar chart for 22 is really small and thus not visible till I zoom in. The thought was to add data labels to the bar so at least we can see "22" on the chart.

0 Karma

somesoni2
Revered Legend

can you be more specific? an example would be great.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

    Thursday, June 25, 2026  |  11AM PDT / 2PM EDT  Duration: 1 Hour (Includes live Q&A) Register to ...

Analytics Workspace deprecation

As of Splunk Cloud Platform 10.4.2604 and Splunk Enterprise 10.4, Analytics Workspace is now deprecated. ...

Splunk Developer Day Recap: Building, Publishing, and Growing on the Splunk Platform

Splunk Developer Day brought the Splunk developer community together for a practical look at what it means to ...