topic Create pie Chart from stats command in Splunk Search

Create pie Chart from stats command

etherdoggy — Thu, 16 Nov 2023 22:07:32 GMT

I am trying to create a pie chart of success vs. failure with stats command with the following:

search | stats c(assigned_user) AS Success c(authorization_failure_user) AS Failed

Re: Create pie Chart from stats command

isoutamo — Thu, 16 Nov 2023 22:21:58 GMT

Hi
Are you trying to count those events or sum or what you are trying?
If count then change c -> count or dc on your stat.
r. Ismo

Re: Create pie Chart from stats command

etherdoggy — Fri, 17 Nov 2023 16:50:06 GMT

Thanks for your response:

I am using c count since each user may have multiple success or failure events. When I choose "Visualization", "pie", the pie renders as one metric. However, below the pie, I can see the numbers for both events are correct. Somehow the pie does not reflect the numbers.