Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

sort based on first count generated by xyseries dynamically

$
0
0
I want to sort based on the 2nd column generated dynamically post using xyseries commandindex="aof_mywizard_deploy_idx" sourcetype="aof_tm_source" | rename "Timelines__FY17_ FY18_Q1" as "Completetion_date" |eval c_status=upper('Current Week Status') |search c_status!="TBC"| stats count(c_status) as count by Completetion_date c_status |eventstats sum(count) as Total by Completetion_date| eval ragcount% = (round((count/Total)*100))."%"| xyseries c_status Completetion_date count ragcount%|rename "count: *" as "*:Count" "ragcount%: *" as "*:Percent%" |table c_status *|rename c_status as "RAG STATUS" Columns generated are Rag status, FY17:Count FY17:percent% Fy18-Q1:count.. etc. I want to sort with the first count (in this case FY17:Count) . How can i do that? can some one please help? if i give sort - "FY17:Count" it works.. but since its dynamically generated , is there a way to handle this?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>