<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to split  query result like using Trellis of Visualizatoin in search in Dashboard Studio in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-split-query-result-like-using-Trellis-of-Visualizatoin-in/m-p/598574#M49101</link>
    <description>&lt;P&gt;Trellies are not supported on Dashboard Studio and AFAIK,&amp;nbsp; there are no alternatives yet.&lt;/P&gt;</description>
    <pubDate>Thu, 19 May 2022 20:41:10 GMT</pubDate>
    <dc:creator>somesoni2</dc:creator>
    <dc:date>2022-05-19T20:41:10Z</dc:date>
    <item>
      <title>How to split  query result like using Trellis of Visualizatoin in search in Dashboard Studio</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-split-query-result-like-using-Trellis-of-Visualizatoin-in/m-p/598468#M49083</link>
      <description>&lt;P&gt;A search query in Dashobard Classic when split by Trellis in Visualization tab i&amp;nbsp; gives 4 pie charts&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;LI-CODE lang="markup"&gt;index=log-13120-nonprod-c laas_appId=qbmp.prediction* "jobPredictionAnalysis" prediction lastEndDelta
| eval accuracy_category = case( abs(lastEndDelta) &amp;lt;= 600, 10, (abs(lastEndDelta) &amp;gt; 600 and abs(lastEndDelta) &amp;lt;= 1200), 20, (abs(lastEndDelta) &amp;gt; 1200 and abs(lastEndDelta) &amp;lt;= 1800), 30, 1==1,40)
| eval timeDistance_category = case(timeDistance &amp;lt; 3600, 1, (timeDistance&amp;gt;3600 and timeDistance&amp;lt;7200),2,(timeDistance&amp;gt;7200 and timeDistance&amp;lt;10800),3,1==1,4)

| chart count by accuracy_category&lt;/LI-CODE&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;But if the same is embedded in Dashboard Studio I have to add a where clause to create the query result in 4 parts to get 4 pie charts becuase I cannot find Trellis option.&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P&gt;How to get 4 piecharts ( split by ... Trellis ) in Dashboard Studio ?&lt;/P&gt;
&lt;P&gt;| where timeDistance_category=1&lt;/P&gt;</description>
      <pubDate>Thu, 19 May 2022 16:11:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-split-query-result-like-using-Trellis-of-Visualizatoin-in/m-p/598468#M49083</guid>
      <dc:creator>mihir_hardas</dc:creator>
      <dc:date>2022-05-19T16:11:31Z</dc:date>
    </item>
    <item>
      <title>Re: How to split  query result like using Trellis of Visualizatoin in search in Dashboard Studio</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-split-query-result-like-using-Trellis-of-Visualizatoin-in/m-p/598574#M49101</link>
      <description>&lt;P&gt;Trellies are not supported on Dashboard Studio and AFAIK,&amp;nbsp; there are no alternatives yet.&lt;/P&gt;</description>
      <pubDate>Thu, 19 May 2022 20:41:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-split-query-result-like-using-Trellis-of-Visualizatoin-in/m-p/598574#M49101</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2022-05-19T20:41:10Z</dc:date>
    </item>
    <item>
      <title>Re: How to split  query result like using Trellis of Visualizatoin in search in Dashboard Studio</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-split-query-result-like-using-Trellis-of-Visualizatoin-in/m-p/598623#M49110</link>
      <description>&lt;P&gt;Thank you for your note. Since Trellis is not available in Dashboard Studio, what should be a good recommended workaround ?&lt;/P&gt;</description>
      <pubDate>Fri, 20 May 2022 06:50:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-split-query-result-like-using-Trellis-of-Visualizatoin-in/m-p/598623#M49110</guid>
      <dc:creator>mihir_hardas</dc:creator>
      <dc:date>2022-05-20T06:50:29Z</dc:date>
    </item>
    <item>
      <title>Re: How to split  query result like using Trellis of Visualizatoin in search in Dashboard Studio</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-split-query-result-like-using-Trellis-of-Visualizatoin-in/m-p/598667#M49111</link>
      <description>&lt;P&gt;I've not got a chance to play around with it, but I believe best option would be to use chained searches (similar to post-process in Classic dashboard). This way you'd be running one main search and then filter/branch out results from that search (in your case, different where clause). See more here:&lt;/P&gt;&lt;P&gt;&lt;A href="https://docs.splunk.com/Documentation/SplunkCloud/8.2.2202/DashStudio/dsChain" target="_blank"&gt;https://docs.splunk.com/Documentation/SplunkCloud/8.2.2202/DashStudio/dsChain&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 20 May 2022 14:41:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-split-query-result-like-using-Trellis-of-Visualizatoin-in/m-p/598667#M49111</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2022-05-20T14:41:48Z</dc:date>
    </item>
  </channel>
</rss>

