Dashboards & Visualizations

chart legend properties

splunkpoornima
Communicator

Hi all,

i created the the trend chart for my Task Manager log files ...some of the Task are showed in legend and remaining Tasks are grouped as OTHER ,..

How it groups the Task and put it in OTHER or it has any criteria so that it groups the Task

Plz clarify me

Thanks
poornima

Tags (1)
0 Karma
1 Solution

lguinn2
Legend

It would help if you actually showed the search.

But I will try to explain in the abstract. If I run a search like this

somesearch | timechart count by task

Splunk will only graph the 10 tasks that appear most frequently. The remaining tasks will be grouped into a category named "OTHER" by default. There are options for removing the OTHER category, as well as other actions you could take to group or eliminate categories. to eliminate OTHER

somesearch | timechart useother=f count by task

Read the entry for the timechart command in the Search Reference Manual for more options.

View solution in original post

0 Karma

lguinn2
Legend

It would help if you actually showed the search.

But I will try to explain in the abstract. If I run a search like this

somesearch | timechart count by task

Splunk will only graph the 10 tasks that appear most frequently. The remaining tasks will be grouped into a category named "OTHER" by default. There are options for removing the OTHER category, as well as other actions you could take to group or eliminate categories. to eliminate OTHER

somesearch | timechart useother=f count by task

Read the entry for the timechart command in the Search Reference Manual for more options.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...