topic Re: Why is "other" on this pie chart? in Dashboards & Visualizations

Why is "other" on this pie chart?

jgauthier — Wed, 19 Jun 2013 15:22:34 GMT

Greetings,

Since an update (I don't know what version to what version, sorry!), one of my dashboards with pie chart is showing "other", and I don't know why.

My saved search is pretty basic:
sourcetype="squid" action="*" uri_host="youtube.com"| top 10 username

My dashboard module includes:

name="charting.chart.sliceCollapsingThreshold">0

But it doesn't seem to work.

Re: Why is "other" on this pie chart?

JSapienza — Wed, 19 Jun 2013 18:06:21 GMT

Try this:

sourcetype="squid" action="*" uri_host="youtube.com"| top 10 username useother="f"

Re: Why is "other" on this pie chart?

jgauthier — Wed, 19 Jun 2013 18:10:27 GMT

No go. I attempted it, even though by using "top" it should inherently exclude other. The query does not include 'other' when I run it in the search. It does, however, in a dashboard.

Re: Why is "other" on this pie chart?

JSapienza — Wed, 19 Jun 2013 18:23:19 GMT

And your code is something like this ?

0

Re: Why is "other" on this pie chart?

jgauthier — Wed, 19 Jun 2013 18:32:22 GMT

Exactly.I tried to copy it here, but the formatting was terrible. 😉

Re: Why is "other" on this pie chart?

jgauthier — Wed, 20 Nov 2013 15:29:34 GMT

Restructuring my search was the only way to resolve this.

sourcetype="squid" action="*" uri_host="youtube.com" | stats count by username | sort 10 -count