Splunk Search

Sort Fields in Charts

wyang6
Path Finder

I have the following chart:

City/Day | Friday | Monday | Thursday | Tuesday | Wednesday

Chicago  | Yes    | Yes    | No       | Yes     | Yes

Dallas   | No     | Yes    | No       | No      | No

New York | No     | No     | Yes      | No      | Yes

How do I sort or re-organize the columns such that it's not in alphabetical order. i.e.:

City/Day | Monday | Tuesday | Wednesday | Thursday | Friday

Chicago  | Yes    | Yes     | Yes       | No       | Yes

Dallas   | Yes    | No      | No        | No       | No

New York | No     | No      | Yes       | Yes      | No

Thank you!

Tags (2)
1 Solution

Stephen_Sorkin
Splunk Employee
Splunk Employee

To reorder fields here, use the "fields" command:

... | fields "City/Day" Monday Tuesday Wednesday Thursday Friday

View solution in original post

wyang6
Path Finder

I typed with the "space" and "vertical bar" character on the keyboard. If you meant in Splunk, I just used the commands below.

0 Karma

Stephen_Sorkin
Splunk Employee
Splunk Employee

To reorder fields here, use the "fields" command:

... | fields "City/Day" Monday Tuesday Wednesday Thursday Friday

Genti
Splunk Employee
Splunk Employee

how did you produce the above chart?

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...