Hello.
My query looks like
...| timechart count by type
And I have values tupe_a, type_b and so on. When I call them like
eval name=case(type=type_a, "Error", type=type_b, "OK")...
and use "count by name" the rows in my staced timechart are ordered by name. But I need it to order by summary count. When I use "count by type" , they are ordered by summary count. How to specify the order or rename the types on the final chart?
Using timechart it's not possible as the values sorted will be distorting the time in the chart. Better use the stats function and do the calculation after the eval. Then apply the sort function. Thanks.
If you just add a total row
…|addcoltotals labelfield=name label=ALL
name count
Error 10
OK 100
ALL 110