topic Re: How to add percentage in unstacked bar chart? in Splunk Search

How to add percentage in unstacked bar chart?

ritupatil02 — Tue, 15 Jun 2021 14:31:09 GMT

I have a bar chart as shown below. I want to display the percentage of Error, Warn and Info as single value visualisation as another panel. How can I do that?

The query for bar chart panel is:

| stats count by lvl | transpose header_field=lvl column_name=lvl

Re: How to add percentage in unstacked bar chart?

ITWhisperer — Tue, 15 Jun 2021 14:48:01 GMT

Then set visualisation to single trellis mode - you may want to change the number format precision to something other than integers

Re: How to add percentage in unstacked bar chart?

kamlesh_vaghela — Tue, 15 Jun 2021 14:54:12 GMT

@ritupatil02

Can you please try this?

| stats count by lvl | eventstats sum(count) as Total | eval perc=round(count*100/Total,2) | xyseries count lvl perc

Thanks
KV
▄︻̷̿┻̿═━一

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.

Re: How to add percentage in unstacked bar chart?

ritupatil02 — Tue, 15 Jun 2021 15:21:03 GMT

Hey that worked.. Thankyou!

Re: How to add percentage in unstacked bar chart?

ritupatil02 — Tue, 15 Jun 2021 15:32:31 GMT

What if I want 3 different single value panels for Error, Info and Warn resp. Is that possible?

Re: How to add percentage in unstacked bar chart?

kamlesh_vaghela — Tue, 15 Jun 2021 15:35:17 GMT

@ritupatil02

Like this?

Re: How to add percentage in unstacked bar chart?

ritupatil02 — Tue, 15 Jun 2021 16:25:32 GMT

No. Instead of using trellis, can we have the 3 percentages in 3 different single value panels