<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Show both values and percentages bar chart in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657413#M54156</link>
    <description>&lt;P&gt;Hi thanks&lt;BR /&gt;not soo petty, but good enough as a workaround&lt;BR /&gt;Do you know how can I add "%" to each value?&lt;BR /&gt;&lt;BR /&gt;current query:&lt;BR /&gt;| stats sum(CountEvents) by CT&lt;BR /&gt;| rename "sum(CountEvents)" as "CountEvents"&lt;BR /&gt;| eventstats sum(CountEvents) as Total&lt;BR /&gt;| eval percentages%=round(CountEvents*100/Total,2)&lt;BR /&gt;| fields - Total&lt;/P&gt;</description>
    <pubDate>Wed, 13 Sep 2023 10:40:23 GMT</pubDate>
    <dc:creator>maayan</dc:creator>
    <dc:date>2023-09-13T10:40:23Z</dc:date>
    <item>
      <title>How to show both values and percentages bar chart?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657404#M54152</link>
      <description>&lt;P&gt;Hi,&lt;BR /&gt;&lt;BR /&gt;Too many hours to solve such a simple question...It is supposed to be a basic thing&lt;BR /&gt;&lt;BR /&gt;I want to present both percentages and regular values in bar chart (it can be in the tooltip, like it exists in a pie chart),&lt;BR /&gt;If not possible to present only percentages but add the "%" symbol (when I tried to add % it converted the fields to string and nothing was shown in the chart)&lt;BR /&gt;&lt;BR /&gt;* I can't add a js script, no access to the server&lt;BR /&gt;&lt;BR /&gt;This is my query:&lt;BR /&gt;| stats sum(CountEvents) by CT&lt;BR /&gt;| rename "sum(CountEvents)" as "countE"&lt;BR /&gt;| eventstats sum(countE) as Total&lt;BR /&gt;| eval perc=round(countE*100/Total,2)&lt;BR /&gt;| chart sum(perc) as "EventsPercentages[%]" over CT&lt;BR /&gt;&lt;BR /&gt;thanks a lot&lt;/P&gt;</description>
      <pubDate>Thu, 14 Sep 2023 16:37:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657404#M54152</guid>
      <dc:creator>maayan</dc:creator>
      <dc:date>2023-09-14T16:37:56Z</dc:date>
    </item>
    <item>
      <title>Re: Show both values and percentages bar chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657406#M54153</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;I'm not sure if I understand your need, but maybe this helps?&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| stats sum(CountEvents) as countE by CT
| eventstats sum(countE) as Total
| eval perc=round(countE*100/Total,2)
| chart sum(perc) as "EventsPercentages[%]" values(countE) as countE over CT&lt;/LI-CODE&gt;&lt;P&gt;Then in visualisation tab select Format -&amp;gt; Chart Overlay&lt;/P&gt;&lt;P&gt;- &amp;gt; Overlay (e.g. &amp;nbsp;your % field) and View as Axis = On&lt;/P&gt;&lt;P&gt;r. Ismo&lt;/P&gt;</description>
      <pubDate>Wed, 13 Sep 2023 09:33:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657406#M54153</guid>
      <dc:creator>isoutamo</dc:creator>
      <dc:date>2023-09-13T09:33:07Z</dc:date>
    </item>
    <item>
      <title>Re: Show both values and percentages bar chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657413#M54156</link>
      <description>&lt;P&gt;Hi thanks&lt;BR /&gt;not soo petty, but good enough as a workaround&lt;BR /&gt;Do you know how can I add "%" to each value?&lt;BR /&gt;&lt;BR /&gt;current query:&lt;BR /&gt;| stats sum(CountEvents) by CT&lt;BR /&gt;| rename "sum(CountEvents)" as "CountEvents"&lt;BR /&gt;| eventstats sum(CountEvents) as Total&lt;BR /&gt;| eval percentages%=round(CountEvents*100/Total,2)&lt;BR /&gt;| fields - Total&lt;/P&gt;</description>
      <pubDate>Wed, 13 Sep 2023 10:40:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657413#M54156</guid>
      <dc:creator>maayan</dc:creator>
      <dc:date>2023-09-13T10:40:23Z</dc:date>
    </item>
    <item>
      <title>Re: Show both values and percentages bar chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657414#M54157</link>
      <description>&lt;P&gt;Can we show them in one row? for example:&amp;nbsp;&lt;BR /&gt;&lt;SPAN&gt;&lt;SPAN class=""&gt;223,229 (45%)&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;it will look much better&lt;/P&gt;</description>
      <pubDate>Wed, 13 Sep 2023 10:50:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657414#M54157</guid>
      <dc:creator>maayan</dc:creator>
      <dc:date>2023-09-13T10:50:59Z</dc:date>
    </item>
    <item>
      <title>Re: Show both values and percentages bar chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657485#M54161</link>
      <description>You could try eval foo = bar . “(“ . zaa . “%)” or something similar. Then fields - &amp;lt;other unneeded fields&amp;gt;</description>
      <pubDate>Wed, 13 Sep 2023 20:26:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657485#M54161</guid>
      <dc:creator>isoutamo</dc:creator>
      <dc:date>2023-09-13T20:26:40Z</dc:date>
    </item>
    <item>
      <title>Re: Show both values and percentages bar chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657543#M54165</link>
      <description>&lt;P&gt;Thanks but how to present that in a bar chart? (to add foo to my bar chart). I can present that only in a table&lt;BR /&gt;&lt;BR /&gt;| stats sum(CountEvents) by CT&lt;BR /&gt;| rename "sum(CountEvents)" as "countE"&lt;BR /&gt;| eventstats sum(countE) as Total&lt;BR /&gt;| eval perc=round(countE*100/Total,2)&lt;BR /&gt;| eval foo = countE . "(" . perc ."%" .")"&lt;BR /&gt;| fields - Total perc&lt;/P&gt;</description>
      <pubDate>Thu, 14 Sep 2023 07:06:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657543#M54165</guid>
      <dc:creator>maayan</dc:creator>
      <dc:date>2023-09-14T07:06:24Z</dc:date>
    </item>
    <item>
      <title>Re: Show both values and percentages bar chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657553#M54167</link>
      <description>&lt;P&gt;i added:&lt;BR /&gt;| xyseries CT,foo,countE&lt;BR /&gt;&amp;nbsp;to my query i think its ok &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 14 Sep 2023 07:44:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657553#M54167</guid>
      <dc:creator>maayan</dc:creator>
      <dc:date>2023-09-14T07:44:53Z</dc:date>
    </item>
    <item>
      <title>Re: Show both values and percentages bar chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657568#M54172</link>
      <description>If needed you could add "|fillnull value=0" at the end.</description>
      <pubDate>Thu, 14 Sep 2023 09:49:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-show-both-values-and-percentages-bar-chart/m-p/657568#M54172</guid>
      <dc:creator>isoutamo</dc:creator>
      <dc:date>2023-09-14T09:49:04Z</dc:date>
    </item>
  </channel>
</rss>

