Column and bar charts represent one or more data series. To make sure that a search generates one or more series, check the Statistics tab in Search & Reporting. The table should have multiple columns.

Search results not structured as a table with valid x-axis or y-axis values cannot generate column or bar charts. For example, using the eval or fields commands might change search result structure.

1. Select the Add chart button ( ) in the editing toolbar and choose a bar or column chart.
2. Set up a new data source by selecting + Create search and adding a search to the SPL query window or select an existing data source under the Search, Saved search, or Chain search sections.
3. (Optional) You can also write a new ID that describes the search better than the default by changing the ID in Data source name.
4. Select Apply and close.

You can use the Configuration panel to configure the following bar and column chart components.

Title

Give your visualization a name. This is also helpful when searching for individual visualizations in the dashboard definitions. This name is not the same as the automatically assigned unique ID.

Description

Give your visualization a description to explain what the user is viewing.

Data sources

Choose an existing ad hoc search or create a new one.

For column charts, you can configure an annotation data source to provide context to the data that the chart displays. See Add secondary data sources to your visualization.

Data configurations

• X: specify the field to use for the x-axis.

• Y: specify the field to use for the y-axis.

• Y2: specify the field to use for the y2-axis.

• Additional tooltip fields: specify the fields to add to the default set of tooltips. Tooltips appear when you hover over events. These fields and their corresponding values show in addition to the ones displayed by default.

• Result limit: specify the number of data points to render in the chart.

• Annotation x: this option is only available for column charts. specify the data source field applied to the event annotation on the x-axis.

• Annotation labels: this option is only available for column charts. Specify a list of labels used for the annotations. You may use a data source to apply the labels. For example, ["houston, we have a problem", "just close the jira", "looking good now"].

Data display

• Stack mode

  Stack mode	Column or bar appearance	Use case
  Not stacked	Columns or bars for different series appear next to each other.	A chart that is not stacked is useful for a lower number of series. As the number of series increases, the chart can become more difficult to understand.
  Stacked	Data points within a series appear as segments of a column or bar. The total column or bar value is the sum of all of the segments.	Use a stacked column or bar chart to highlight the relative volume, frequency, or importance of data points in a series.
  Stacked 100%	Each bar or column is divided into segments representing the distribution percentage for each data value in one series.	Use stacked 100% to show data distributions when there is significant segment size variation in each column or bar.

• Data value display: choose whether to show no data values (Off), all data values (All), or only the minimum and maximum (Min/Max).

• Show tooltip on hover: this option is only available for column charts. Specify whether a tooltip should be visible on hover.

• Overlay fields: specify field(s) that should be differentiated on the chart and displayed as chart overlays.

• Split series: split a multi-series chart into separate charts: one for each series. When enabled, you can also enable independent y-ranges for each split chart.

• Trellis layout: enable trellis layout to split the chart by field value or aggregation. See Trellis layout.

• Column grouping mode: this option is only available for column charts. Specify the column grouping mode. If Stack mode is defined, it overrides grouping behavior.

• Background color: specify the color for the background. You may use a data source to apply the color. The default for enterprise light is "#ffffff". The default for enterprise dark is "#000000". The default for prisma dark is "#0b0c0e".

• Series colors: specify the colors used for a series.

• Series colors by field name: specify the colors used for specific fields in a series.

• Spacing between column series: specify, in pixels, the spacing between clustered series in column charts.

• Spacing between columns: this option is only available for column charts. Specifies, in pixels, the spacing between columns in a column chart.

• Line width: specify the line width, in pixels, for chart overlay.

• Annotation colors: this option is only available for column charts. Specify the annotation colors. You may use a data source to apply the color.

• Series spacing: specify, in pixels, the spacing between clustered series in bar charts.

• Bar spacing: this option is only available for bar charts. Specify, in pixels, the spacing between columns in a bar chart.

• For corner radius options, see Round visualization corners.

Legend

• Use Legend display to choose the position of the legend.

• Use Legend truncation to choose how legend labels are truncated when they overflow the layout boundaries by choosing where to place ellipses (...)

• Use Legend mode to specify visual and behavioral settings for the tooltip and legend.

Axis grid and labels

• Axis title: specify whether to show or hide the title of the x-axis.

• Axis title text: specify the title of the axis.

• Show overlays on the y2-axis: only available for y2-axis. Enable a y2-axis for chart overlays. All overlay fields will be mapped to a second y-axis.

• Scale: only available for y-axes. Specify the type of scale that applies to a numerical y-axis.

• Label visibility: specify whether to show or hide labels on the x-axis.

• Label rotation: only available fo the x-axis for column charts. Specify the rotation of the x-axis label in degrees.

• Number of time label parts: only available for x-axis. Specify the maximum number of time-parts that a tick label will have, with the 3 possible parts being year, month, time.

• Round axis labels: only available for y2-axis. Specify whether to round y2-axis values to the nearest integer.

• SI prefix abbreviation for labels: only available for y-axes. Specify whether to abbreviate large y-axis values with the closest SI prefix.

• Include zero: only available for y-axes. Specify whether the y-axis range includes zero.

• Extend to whole grid: only available for y-axis. Specify whether the y-axis should be extended to include whole major tick marks.

• Minimum axis value: only available for y-axes. Specify the minimum number for the visible y-axis range.

• Maximum axis value: only available for y-axes. Specify the maximum number for the visible y-axis range.

• Axis line visibility: specify whether to show or hide the y2-axis line.

• Major gridlines: specify whether major grid lines are visible on the axis.

• Major tick visibility: specify whether to show or hide major tick marks on the axis.

• Major tick size: specify the size, in pixels, of major tick marks on the axis.

• Minor gridlines: only available for y-axes. Specify whether minor grid lines are visible on the specified y-axis.

• Minor tick visibility: only available for y-axes. Specify whether to show or hide minor tick marks on the y-axis.

• Minor tick size: only available for y-axes. Specify the size, in pixels, of minor tick marks on the y-axis.

You can customize your dashboard with the Dashboard Studio UI or set options in the source editor for splunk.bar and splunk.column. The UI and source options both produce the same design results.

Additionally, you can write advanced configurations in the source editor using selector and formatting functions and dynamic options syntax. See Modify and write dynamic options syntax.

Add source options to the options field of the visualization stanza. The following example shows the addition of background color settings using a hexadecimal code.

"viz_25NNIqLF": {
  "type": "splunk.bar",
  "options": {
    "backgroundColor": "#0000FF",
  },
  "dataSources": {
    "primary": "ds_gcEN4c7Q"
  }
} 

For more on how visualization stanzas are structured, see The visualizations section. Following are all of the options available: