I am have a search as :
index="abc" sourcetype="xyz"| stats count by status_code.
So how can I change the colors of bar based on the status_code.
@Arpmjdr try the following with transpose command.
index="abc" sourcetype="xyz" status_code=*
| stats count by status_code
| transpose 0 header_field="status_code"
@Arpmjdr try the following with transpose command.
index="abc" sourcetype="xyz" status_code=*
| stats count by status_code
| transpose 0 header_field="status_code"
Thanks for the help Nilay 🙂
@Arpmjdr , if your issue is resolved, do accept/up vote the answer. If not then let us know 🙂