https://community.splunk.com/t5/Splunk-Cloud-Platform/Custom-Pie-Chart/m-p/537027#M463 <P>I have&nbsp; a requirement where I have to show a pie chart which shows pending/opened/assigned service request from last Feb to till now but the time span should be 40, as well as which services are older than 80 days. it will come in "&gt;80" legend. Like in this way only (0-40, 40-80, &gt;80)</P><P>&nbsp;</P><P>My Search query is :&nbsp;<BR /><BR />index a<BR />| table a b c d&nbsp; &nbsp; &nbsp; &nbsp; [a b c d stands for a=user, b=date, c=service request number and d=days]<BR />| chart count(c) by d span=40&nbsp;&nbsp;</P><P>&nbsp;</P><P>My Output :<BR /><BR />days&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;count(number)<BR />0-40&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 3111<BR />40-80&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2252<BR />80-120&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 478<BR />120-160&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2757<BR /><BR /><BR />But I want my output in manner :<BR />days&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;count(number)<BR />0-40&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 3111<BR />40-80&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2252<BR />&gt;80&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;3235 (478+2757)</P><P>&nbsp;</P><P>Is it possible to get my desired output in the pie chart?<BR /><BR />Please give me an example with a search query if we can do that.&nbsp;</P> Mon, 25 Jan 2021 10:47:59 GMT saibal6 2021-01-25T10:47:59Z https://community.splunk.com/t5/Splunk-Cloud-Platform/Custom-Pie-Chart/m-p/537027#M463 <P>I have&nbsp; a requirement where I have to show a pie chart which shows pending/opened/assigned service request from last Feb to till now but the time span should be 40, as well as which services are older than 80 days. it will come in "&gt;80" legend. Like in this way only (0-40, 40-80, &gt;80)</P><P>&nbsp;</P><P>My Search query is :&nbsp;<BR /><BR />index a<BR />| table a b c d&nbsp; &nbsp; &nbsp; &nbsp; [a b c d stands for a=user, b=date, c=service request number and d=days]<BR />| chart count(c) by d span=40&nbsp;&nbsp;</P><P>&nbsp;</P><P>My Output :<BR /><BR />days&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;count(number)<BR />0-40&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 3111<BR />40-80&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2252<BR />80-120&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 478<BR />120-160&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2757<BR /><BR /><BR />But I want my output in manner :<BR />days&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;count(number)<BR />0-40&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 3111<BR />40-80&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2252<BR />&gt;80&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;3235 (478+2757)</P><P>&nbsp;</P><P>Is it possible to get my desired output in the pie chart?<BR /><BR />Please give me an example with a search query if we can do that.&nbsp;</P> Mon, 25 Jan 2021 10:47:59 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/Custom-Pie-Chart/m-p/537027#M463 saibal6 2021-01-25T10:47:59Z