Dashboards & Visualizations

How to create a bar chart with different colors and show as sorted?

wayne_test
Explorer

I'm trying to create a bar chart. But if I just do it by:

index="cn-*"
|top limit=5 SrcIP

The bar chart shows in just single color.

if I do it by:

index="cn-*"
|top limit=5 SrcIP
|eval temp=""
|xyseries temp SrcIP count

The bar chart shows in different colors. But the order seems not sorted by the count.

So, is there any way to create a bar chart with a different color and can it be sorted by the count? Also, I need drilldown at the bar chart.

0 Karma
1 Solution

niketn
Legend

@wayne_test try the following:

index="cn-*"
| top limit=5 SrcIP showperc=f
| fields - _*
| transpose header_field="SrcIP"
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

niketn
Legend

@wayne_test try the following:

index="cn-*"
| top limit=5 SrcIP showperc=f
| fields - _*
| transpose header_field="SrcIP"
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

wayne_test
Explorer

It works! Thanks.

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...