The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Set up stacking on a distribution query

  • Published on Sep 12, 2026
  • 1 minute(s) read
Prev Next

Group events by a specified data field, and then stack by time segment.

When adding widgets to views, choose how to stack the distribution. When you access the view, you can change the settings, set the interval, and set the chart type and details.

Note

You can't use Stacking and Compare in the same query.

  1. Click the widget menu GUID-90CC508D-C258-41AB-9D9C-4E1D7DE5FBCB-low.png and select Settings.

    Note

    Stacking is unavailable for Collection Rate or Average (for example, Avg Severity Per Alert or Avg Duration Per Flow) distribution queries.

  2. Click Stacking.

  3. Enable stacking using the enable/disable slider. GUID-8702DFF7-0E96-48D7-A79E-53A9C57903B0-low.png

  4. Configure the stacking options and click Save.