Splunk Search
Highlighted

chart query

Contributor

The following query

index=test | top Hostname

produces a chart that has percentages included in the chart along with the top hostnames. How do I not include the percentages in the chart? I do not want percentages in the chart.

Tags (1)
0 Karma
Highlighted

Re: chart query

Path Finder

You can do:

index=test 
| stats count(_raw) as topHostnames by Hostname 
| sort - topHostnames
0 Karma
Highlighted

Re: chart query

Splunk Employee
Splunk Employee

The showperc modifier to the top command is what you want. Here is how you use it:

index=test | top showperc=false Hostname

View solution in original post

0 Karma