https://community.splunk.com/t5/Dashboards-Visualizations/problem-with-pie-chart/m-p/76283#M4127 <P>before charting you could do create a new field based on a eval, if it's one of the four url's it will have the url name , if that is not the case the value will be "other"</P> <PRE><CODE>eval my_url=case(url==url1,"url1",url==url2,"url2",url==url3,"url3",url==url4,"url4",url!="url1" AND url!=url2 AND url!=url3 AND url!=url4,"other") | chart count by my_url </CODE></PRE> Wed, 26 Jun 2013 23:22:26 GMT asimagu 2013-06-26T23:22:26Z https://community.splunk.com/t5/Dashboards-Visualizations/problem-with-pie-chart/m-p/76282#M4126 <P>hi<BR /> i hav read the docs of Splunk but still unable to solve my problem..i want to create a pie chart where there are 5 sector.4 of them are for different url(that will be chosen by me) and the other sector will consist of rest of the urls. and the name of this sector will be OTHER.. what will be the searching code? <BR /> thanx.. </P> Wed, 26 Jun 2013 13:11:23 GMT https://community.splunk.com/t5/Dashboards-Visualizations/problem-with-pie-chart/m-p/76282#M4126 prapanna 2013-06-26T13:11:23Z https://community.splunk.com/t5/Dashboards-Visualizations/problem-with-pie-chart/m-p/76283#M4127 <P>before charting you could do create a new field based on a eval, if it's one of the four url's it will have the url name , if that is not the case the value will be "other"</P> <PRE><CODE>eval my_url=case(url==url1,"url1",url==url2,"url2",url==url3,"url3",url==url4,"url4",url!="url1" AND url!=url2 AND url!=url3 AND url!=url4,"other") | chart count by my_url </CODE></PRE> Wed, 26 Jun 2013 23:22:26 GMT https://community.splunk.com/t5/Dashboards-Visualizations/problem-with-pie-chart/m-p/76283#M4127 asimagu 2013-06-26T23:22:26Z https://community.splunk.com/t5/Dashboards-Visualizations/problem-with-pie-chart/m-p/76284#M4128 <P>thnx for the answer.. but still there is a problem with it..here only the "other" part is showing in the chart.rest<BR /><BR /> of the sectors are not showing..</P> Thu, 27 Jun 2013 14:10:03 GMT https://community.splunk.com/t5/Dashboards-Visualizations/problem-with-pie-chart/m-p/76284#M4128 prapanna 2013-06-27T14:10:03Z https://community.splunk.com/t5/Dashboards-Visualizations/problem-with-pie-chart/m-p/76285#M4129 <P>thnx for the answer.. but still there is a problem with it..here only the "other" part is showing in the chart.rest<BR /><BR /> of the sectors are not showing..</P> Thu, 27 Jun 2013 14:12:29 GMT https://community.splunk.com/t5/Dashboards-Visualizations/problem-with-pie-chart/m-p/76285#M4129 prapanna 2013-06-27T14:12:29Z https://community.splunk.com/t5/Dashboards-Visualizations/problem-with-pie-chart/m-p/76286#M4130 <P>sorry, I just edited my answer, that should work now</P> Thu, 27 Jun 2013 21:02:22 GMT https://community.splunk.com/t5/Dashboards-Visualizations/problem-with-pie-chart/m-p/76286#M4130 asimagu 2013-06-27T21:02:22Z https://community.splunk.com/t5/Dashboards-Visualizations/problem-with-pie-chart/m-p/76287#M4131 <P>did that one work?</P> Tue, 02 Jul 2013 03:03:04 GMT https://community.splunk.com/t5/Dashboards-Visualizations/problem-with-pie-chart/m-p/76287#M4131 asimagu 2013-07-02T03:03:04Z