Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

how to determine the order ranges display in tables and charts (When using the rangemap command)

$
0
0
I want to order renge from low amout of min/hour to high, like this : 1S-1M, 1M-30M, 30M-1H, 1H-2H, 2H-3H, 3H-4H, 4H-5H, 5H-8H, 8H-10H, 10H-15H, 15H-More I use this command; | rangemap field=duration 1S-1M=0-60 1M-30M=61-1800 30M-1H=1801-3600 1H-2H=3601-7200 2H-3H=7201-10800 3H-4H=10801-14400 4H-5H=14401-18000 5H-8H=18001-28800 8H-10H=28801-36000 10H-15H=36001-54000 15H-More=54001-9999999999 | chart count by range and I get this order range; ![alt text][1] and I want to order them from 1S-1M, 1M-30M, 30M-1H, ... , 10H-15H, 15H-more. [1]: /storage/temp/284642-order.jpg

Viewing all articles
Browse latest Browse all 47296

Trending Articles