The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Set up stacking on a distribution query

  • Published on Sep 12, 2026
  • 1 minute(s) read
Prev Next

Group events by a specified data field, and then stack by time segment.

When adding widgets to views, choose how to stack the distribution. When you access the view, you can change the settings, set the interval, and set the chart type and details.

Note

You can't use Stacking and Compare in the same query.

  1. Click the widget menu GUID-90CC508D-C258-41AB-9D9C-4E1D7DE5FBCB-low.png and select Settings.

    Note

    Stacking is unavailable for Collection Rate or Average (for example, Avg Severity Per Alert or Avg Duration Per Flow) distribution queries.

  2. Click Stacking.

  3. Enable stacking using the enable/disable slider. GUID-8702DFF7-0E96-48D7-A79E-53A9C57903B0-low.png

  4. Configure the stacking options and click Save.

:

Related articles