Dashboards & Visualizations

How to create a bar chart with different colors and show as sorted?

wayne_test
Explorer

I'm trying to create a bar chart. But if I just do it by:

index="cn-*"
|top limit=5 SrcIP

The bar chart shows in just single color.

if I do it by:

index="cn-*"
|top limit=5 SrcIP
|eval temp=""
|xyseries temp SrcIP count

The bar chart shows in different colors. But the order seems not sorted by the count.

So, is there any way to create a bar chart with a different color and can it be sorted by the count? Also, I need drilldown at the bar chart.

0 Karma
1 Solution

niketn
Legend

@wayne_test try the following:

index="cn-*"
| top limit=5 SrcIP showperc=f
| fields - _*
| transpose header_field="SrcIP"
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

niketn
Legend

@wayne_test try the following:

index="cn-*"
| top limit=5 SrcIP showperc=f
| fields - _*
| transpose header_field="SrcIP"
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

wayne_test
Explorer

It works! Thanks.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...