<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Pie chart help in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Pie-chart-help/m-p/534369#M36433</link>
    <description>&lt;P&gt;Hi Splunkers,&lt;/P&gt;&lt;P&gt;I found the solution:&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;host=* |&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#0000FF"&gt;eval&lt;/FONT&gt;&lt;SPAN&gt;&amp;nbsp;$Overview$ |&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#0000FF"&gt;chart&lt;/FONT&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF00FF"&gt;sum&lt;/FONT&gt;&lt;SPAN&gt;(Warning)&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF6600"&gt;as&lt;/FONT&gt;&lt;SPAN&gt;&amp;nbsp;"Warnings"&amp;nbsp;&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF00FF"&gt;sum&lt;/FONT&gt;&lt;SPAN&gt;(Violation)&amp;nbsp;&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF6600"&gt;as&lt;/FONT&gt;&lt;SPAN&gt;&amp;nbsp; Violations&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF00FF"&gt;sum&lt;/FONT&gt;&lt;SPAN&gt;(Alerts)&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF6600"&gt;as&amp;nbsp;&lt;/FONT&gt;&lt;SPAN&gt;Alerts | transpose&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I was missing the transpose command.&lt;/P&gt;&lt;P&gt;Thank you,&lt;/P&gt;&lt;P&gt;Marco&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 29 Dec 2020 15:08:01 GMT</pubDate>
    <dc:creator>Marco</dc:creator>
    <dc:date>2020-12-29T15:08:01Z</dc:date>
    <item>
      <title>Pie chart help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Pie-chart-help/m-p/534277#M36406</link>
      <description>&lt;P&gt;Hi Splunkers,&lt;/P&gt;&lt;P&gt;I am currently trying to create a pie chart that gets its data from a token:&lt;/P&gt;&lt;P&gt;host=* | &lt;FONT color="#0000FF"&gt;eval&lt;/FONT&gt; $Overview$ | &lt;FONT color="#0000FF"&gt;chart&lt;/FONT&gt; &lt;FONT color="#FF00FF"&gt;sum&lt;/FONT&gt;(Warning) &lt;FONT color="#FF6600"&gt;as&lt;/FONT&gt; "Warnings"&amp;nbsp;&amp;nbsp;&lt;FONT color="#FF00FF"&gt;sum&lt;/FONT&gt;(Violation)&amp;nbsp; &lt;FONT color="#FF6600"&gt;as&lt;/FONT&gt;&amp;nbsp; Violations&amp;nbsp;&lt;FONT color="#FF00FF"&gt;sum&lt;/FONT&gt;(Alerts) &lt;FONT color="#FF6600"&gt;as&amp;nbsp;&lt;/FONT&gt;Alerts&amp;nbsp; &lt;FONT color="#FF6600"&gt;over &lt;/FONT&gt;&lt;FONT color="#FF00FF"&gt;sum&lt;/FONT&gt;(ALL)&lt;/P&gt;&lt;P&gt;I am looking to create a pie chart that shows these three values. Any help is appreciated&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you,&lt;/P&gt;&lt;P&gt;Marco&lt;/P&gt;</description>
      <pubDate>Mon, 28 Dec 2020 21:42:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Pie-chart-help/m-p/534277#M36406</guid>
      <dc:creator>Marco</dc:creator>
      <dc:date>2020-12-28T21:42:51Z</dc:date>
    </item>
    <item>
      <title>Re: Pie chart help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Pie-chart-help/m-p/534289#M36407</link>
      <description>&lt;P&gt;sample:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| makeresults count=20
| eval Warning = random() %  20,Violation = random() % 20, Alerts = random() % 20
| rename COMMENT as "The sample. from here, the logic."
| chart sum(Warning) as "Warnings"  sum(Violation)  as  Violations sum(Alerts) as Alerts
| eval tmp="1"
| untable tmp Status Count
| fields - tmp
| rename COMMENT as "Viz &amp;gt;&amp;gt; Pie Chart"&lt;/LI-CODE&gt;</description>
      <pubDate>Tue, 29 Dec 2020 00:25:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Pie-chart-help/m-p/534289#M36407</guid>
      <dc:creator>to4kawa</dc:creator>
      <dc:date>2020-12-29T00:25:21Z</dc:date>
    </item>
    <item>
      <title>Re: Pie chart help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Pie-chart-help/m-p/534369#M36433</link>
      <description>&lt;P&gt;Hi Splunkers,&lt;/P&gt;&lt;P&gt;I found the solution:&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;host=* |&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#0000FF"&gt;eval&lt;/FONT&gt;&lt;SPAN&gt;&amp;nbsp;$Overview$ |&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#0000FF"&gt;chart&lt;/FONT&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF00FF"&gt;sum&lt;/FONT&gt;&lt;SPAN&gt;(Warning)&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF6600"&gt;as&lt;/FONT&gt;&lt;SPAN&gt;&amp;nbsp;"Warnings"&amp;nbsp;&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF00FF"&gt;sum&lt;/FONT&gt;&lt;SPAN&gt;(Violation)&amp;nbsp;&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF6600"&gt;as&lt;/FONT&gt;&lt;SPAN&gt;&amp;nbsp; Violations&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF00FF"&gt;sum&lt;/FONT&gt;&lt;SPAN&gt;(Alerts)&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF6600"&gt;as&amp;nbsp;&lt;/FONT&gt;&lt;SPAN&gt;Alerts | transpose&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I was missing the transpose command.&lt;/P&gt;&lt;P&gt;Thank you,&lt;/P&gt;&lt;P&gt;Marco&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 29 Dec 2020 15:08:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Pie-chart-help/m-p/534369#M36433</guid>
      <dc:creator>Marco</dc:creator>
      <dc:date>2020-12-29T15:08:01Z</dc:date>
    </item>
  </channel>
</rss>

