|
- timechart - Splunk Documentation
The useother option specifies whether to merge all of the series not included in the results table into a single new series If useother=true , the label for the series is controlled by the otherstr option
- Where do I put the useother argument in my searc . . . - Splunk Community
By default, timechart will only show 10 columns and group everything else in the "OTHER" group Hence the useother, if set to false, will hide the "OTHER" group To show more than 10, you should use limit=x where 0 means unlimited So in you make the following change | timechart limit=0 span=1d sum(b) AS volumeB by h |
- timechart command: Usage | Splunk Docs
The useother option and other timechart options apply only to the split-by field and must be specified immediately after the split-by field
- How to display all values in a graph displayed with the timechart . . .
useother option When there are many items to be displayed, the grouped items are displayed as "OTHER" If you use useother=false in the search statement, the combined "OTHER" items will be hidden
- Solved: useother=f in a pie chart - Splunk Community
I have this same issue with Pie chart I'm using Splunk 6 2 usenull=f with Chart command still shows "other" slice And the Not index=OTHER gives syntax errors Any ideas?
- Top ten most common database queries - Splunk Lantern
|top query useother=true Return the top 10 most common queries, with a count and percent value for each query Merge the results not included in the table into a single new row called "OTHER"
- top - Splunk Documentation
useother Syntax: useother=<bool> Description: Specify whether or not to add a row that represents all values not included due to the limit cutoff Default: false Usage The top command is a transforming command See Command types Default fields When you use the top command, two fields are added to the results: count and percent
- timechart | Splunk Docs
useother Syntax: useother=<bool> Description: You specify which series to include in the results table by using the <agg>, <limit>, and <where-clause> options The useother option specifies whether to merge all of the series not included in the
|
|
|