topic How can I show all values in a pie chart instead of some values being consolidated into "other"? in Dashboards & Visualizations

How can I show all values in a pie chart instead of some values being consolidated into "other"?

sivapuvvada — Mon, 28 Dec 2015 19:08:41 GMT

I tried useother=f, it is removing the other values from the Pie chart, but I need all the values in the pie chart instead of removing some.

Re: How can I show all values in a pie chart instead of some values being consolidated into "other"?

sundareshr — Mon, 28 Dec 2015 19:40:19 GMT

Add a limit=0 to your chart command

Re: How can I show all values in a pie chart instead of some values being consolidated into "other"?

sivapuvvada — Tue, 29 Dec 2015 20:22:01 GMT

I tried with limit=0 still not working 😞

Re: How can I show all values in a pie chart instead of some values being consolidated into "other"?

sundareshr — Tue, 29 Dec 2015 20:38:33 GMT

Have you tried

 <option name="charting.chart.sliceCollapsingThreshold">0</option>

Re: How can I show all values in a pie chart instead of some values being consolidated into "other"?

jay01810 — Thu, 22 Dec 2016 02:19:06 GMT

Edit Panels and change the attribute "size",it will be OK.

https://docs.splunk.com/Documentation/Splunk/6.5.1/Viz/PieChart

Re: How can I show all values in a pie chart instead of some values being consolidated into "other"?

chimell — Thu, 22 Dec 2016 07:59:47 GMT

try something like this

index="price" |chart limit=0 count by productId , product_name

Re: How can I show all values in a pie chart instead of some values being consolidated into "other"?

LMaher1 — Mon, 23 Oct 2017 12:32:48 GMT

you will have to expand the limit of the output meaning:
userother=f
(it will not consolidate any values into other)

then

limit=10
(in this case if the output normally yields 15 line it will omit the extra 5 from the output, and since you are using "useother=f" they won't be added to other)

Re: How can I show all values in a pie chart instead of some values being consolidated into "other"?

cnoerjadi — Fri, 10 Nov 2017 18:18:05 GMT

Thank you!

Re: How can I show all values in a pie chart instead of some values being consolidated into "other"?

kdimaria — Thu, 14 Jun 2018 16:29:21 GMT

This works!

Re: How can I show all values in a pie chart instead of some values being consolidated into "other"?

rashmipandit — Fri, 25 Jan 2019 00:52:12 GMT

Where and how do we exactly use 0?

Re: How can I show all values in a pie chart instead of some values being consolidated into "other"?

niketn — Fri, 25 Jan 2019 02:48:54 GMT

The above is assuming the query that feeds to Pie Chart is the chart command. For example:

<someBaseSearch>
| chart count by someField limit=0

Refer to Splunk Documentation: https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Chart#Chart_options