<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to create a pie chart after applying math on column values extracted? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-after-applying-math-on-column-values/m-p/627000#M217908</link>
    <description>&lt;P&gt;Hey people, Can I get some help&lt;/P&gt;</description>
    <pubDate>Fri, 13 Jan 2023 04:03:14 GMT</pubDate>
    <dc:creator>sjs</dc:creator>
    <dc:date>2023-01-13T04:03:14Z</dc:date>
    <item>
      <title>How to create a pie chart after applying math on column values extracted?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-after-applying-math-on-column-values/m-p/626729#M217828</link>
      <description>&lt;P&gt;Hey people, my requirement is as such&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="sjs_0-1673428861777.png" style="width: 3147px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/23305iE1106E34966C14F6/image-dimensions/3147x151?v=v2" width="3147" height="151" role="button" title="sjs_0-1673428861777.png" alt="sjs_0-1673428861777.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;I have extracted these columns from my data using the query&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;LI-CODE lang="markup"&gt;my query | rex "filterExecutionTime=(?&amp;lt;FET&amp;gt;[^,]+)" | rex "ddbWriteExecutionTime=(?&amp;lt;ddbET&amp;gt;[^)]+)" | rex "EXECUTION_TIME : (?&amp;lt;totalTime&amp;gt;[^ ms]+)" | eval buildAndTearDowTime=(tonumber(FET)) + (tonumber(ddbET)) |table totalTime FET ddbET buildAndTearDownTime&lt;/LI-CODE&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I want to have buildAndTearDown as totalTime - (FET+ ddbET)&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;once I have all the three values required (FET, ddbET, buildAndTearDown) I want to put these values in a pie chart.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks &lt;span class="lia-unicode-emoji" title=":smiling_face_with_smiling_eyes:"&gt;😊&lt;/span&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 11 Jan 2023 19:58:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-after-applying-math-on-column-values/m-p/626729#M217828</guid>
      <dc:creator>sjs</dc:creator>
      <dc:date>2023-01-11T19:58:51Z</dc:date>
    </item>
    <item>
      <title>Re: Create a pie chart after applying math on column values extracted</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-after-applying-math-on-column-values/m-p/626730#M217829</link>
      <description>&lt;P&gt;This statement&amp;nbsp;&lt;/P&gt;&lt;P&gt;eval buildAndTearDowTime=(tonumber(FET)) + (tonumber(ddbET))&lt;/P&gt;&lt;P&gt;is giving me null value&lt;/P&gt;</description>
      <pubDate>Wed, 11 Jan 2023 09:26:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-after-applying-math-on-column-values/m-p/626730#M217829</guid>
      <dc:creator>sjs</dc:creator>
      <dc:date>2023-01-11T09:26:47Z</dc:date>
    </item>
    <item>
      <title>Re: How to create a pie chart after applying math on column values extracted?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-after-applying-math-on-column-values/m-p/627000#M217908</link>
      <description>&lt;P&gt;Hey people, Can I get some help&lt;/P&gt;</description>
      <pubDate>Fri, 13 Jan 2023 04:03:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-after-applying-math-on-column-values/m-p/627000#M217908</guid>
      <dc:creator>sjs</dc:creator>
      <dc:date>2023-01-13T04:03:14Z</dc:date>
    </item>
    <item>
      <title>Re: How to create a pie chart after applying math on column values extracted?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-after-applying-math-on-column-values/m-p/627423#M218027</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/252815"&gt;@sjs&lt;/a&gt;&amp;nbsp;,&lt;/P&gt;&lt;P&gt;You have a typo in your eval , you are missing &lt;STRONG&gt;n&amp;nbsp;&lt;/STRONG&gt;in &lt;STRONG&gt;buildAndTearDown&lt;/STRONG&gt;, please try below;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;my query 
| rex "filterExecutionTime=(?&amp;lt;FET&amp;gt;[^,]+)" 
| rex "ddbWriteExecutionTime=(?&amp;lt;ddbET&amp;gt;[^)]+)" 
| rex "EXECUTION_TIME : (?&amp;lt;totalTime&amp;gt;[^ ms]+)" 
| eval buildAndTearDownTime=(tonumber(FET)) + (tonumber(ddbET)) 
| table totalTime FET ddbET buildAndTearDownTime&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 18 Jan 2023 06:32:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-after-applying-math-on-column-values/m-p/627423#M218027</guid>
      <dc:creator>scelikok</dc:creator>
      <dc:date>2023-01-18T06:32:04Z</dc:date>
    </item>
  </channel>
</rss>

