I found a solution to this at JSON File Widget Example • Cortex XSOAR Administrator Guide • Reader • Palo Alto Networks documentat.... Tested under 6.13.
- Create and save the widget. Group by day, week, or month.
- Edit the widget, then click on "Download as JSON" from the edit screen. Close the edit screen.
- Edit the JSON, to add this line to the structure:
"sort": [{ "field": "occurred", "asc": true }]
- From the Widget Library, click on the + sign to add a new widget.
- Select the "Upload" option from the "+" menu, and upload the modified JSON.
- Remove the old widget from your dashboard.
- Add the updated widget to your dashboard.
Once this is done, you can add multiple copies of the sorted widget and modify them as needed.
Here's the sample file:
{
"dataType": "incidents",
"widgetType": "column",
"params": {
"groupBy": [
"occurred(d)",
"type"
],
"valuesFormat": "abbreviated",
"timeFrame": "days"
},
"dateRange": {
"period": {
"byFrom": "days",
"fromValue": 7
}
},
"propagationLabels": [
"all"
],
"customCalculation": {
"operation": "count",
"fieldName": "",
"expression": ""
},
"name": "Change Sort Order In Column Chart - Sort by Date",
"sort": [{ "field": "occurred", "asc": true }]
}