topic Single Value Field Count in Dashboards & Visualizations

Single Value Field Count

bchristensen — Thu, 30 Dec 2010 02:18:14 GMT

This should be an easy one for you guys.

Basically, I'm trying to display the total number of hosts associated with an event into a single value:

<single>
  <searchString>eventtype="sp.*" | stats count(tag::host) | rangemap field=count low=1-1000000 default=low</searchString>
  <title># Of Active Customers</title>
  <earliestTime>-4h</earliestTime>
  <option name="afterLabel">Customers</option>
  <option name="linkFields">result,beforeLabel</option>
  <option name="classField">range</option>

Driving me nuts! I keep coming back with "N/A Customers" displayed in the button.

Re: Single Value Field Count

southeringtonp — Thu, 30 Dec 2010 07:20:27 GMT

Looks like your field names aren't going to match coming out of stats. Also, the example search is going to give you the number of host tags rather than of the number of the hosts -- is that what you intended?

Try changing:

| stats count(tag::host)

to (number of host tags):

| stats count(tag::host) as count

or (number of hosts):

| stats dc(host) as count