topic Re: Bar Chart in Dashboards & Visualizations

Bar Chart

sanjay_shrestha — Tue, 11 Feb 2014 16:29:27 GMT

Hi,

Here is my data looks like:

project     status
p1            s1
p2            s3
p3           
p4            s1
p5            s2

I would like to create a bar chart as below:

Thanks,

Sanjay

Re: Bar Chart

somesoni2 — Tue, 11 Feb 2014 17:28:50 GMT

I believe the Y axis values have to be numeric, which is not in your case. Other option could be to use a numeric code for your status and do a chart based on that.

Re: Bar Chart

rahulroy_splunk — Tue, 11 Feb 2014 17:49:01 GMT

something like this

search giving field project, status | eval nStatus=case(status="s1",1,status="s2",2,status="s3",3,1=1,4) | table project, nStatus

Re: Bar Chart

sanjay_shrestha — Tue, 11 Feb 2014 17:49:24 GMT

I was able to create using numerical values, however it would not be verbose. Is there a way to change labels or display reference matching table.

Re: Bar Chart

somesoni2 — Tue, 11 Feb 2014 18:34:23 GMT

I couldn't fine any options for that so far. Here is another tweak see if this is acceptable for you.

search giving field project, status| eval nStatus=case(status="s1",1,status="s2",2,status="s3",3,1=1,0) | chart max(nStatus) as MyStatus over project by status | rename VALUE as NA

status will appear as legend and bars will have different color for each status.

Re: Bar Chart

sanjay_shrestha — Tue, 11 Feb 2014 18:53:18 GMT

Thanks for the solution.