https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-to-compare-data-between-two-months/m-p/201635#M58419 <P>Try something like this</P> <PRE><CODE>index=aut_kpi2 earliest=@mon latest=@m $servicesToken$ $catalogToken$ $subscriptionToken$ | chart count as Total_count_ThisMonth by service_offering_name | sort -Total_count| head $topToken$ | eval signature_slice = "Total: " + service_offering_name + ": " + Total_count | fields signature_slice, Total_count | append [search index=aut_kpi2 earliest=-1y@mon latest=-1y@mon+1mon $servicesToken$ $catalogToken$ $subscriptionToken$ | chart count as Total_count_LastYearThisMonth by service_offering_name | sort -Total_count_LastYearThisMonth | head $topToken$ | eval signature_slice = "Total: " + service_offering_name + ": " + Total_count_LastYearThisMonth | fields signature_slice, Total_count_LastYearThisMonth ] | stats values(*) as * by service_offering_name </CODE></PRE> Thu, 11 Feb 2016 17:49:57 GMT somesoni2 2016-02-11T17:49:57Z https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-to-compare-data-between-two-months/m-p/201634#M58418 <P>Hello,</P> <P>I need to create a pie chart to compare with this month "February" and the month of last year "February 2015". This is my search, but I need this option <span class="lia-unicode-emoji" title=":confused_face:">😕</span></P> <PRE><CODE>index=aut_kpi2 $servicesToken$ $catalogToken$ $subscriptionToken$ | chart count as Total_count by service_offering_name | sort -Total_count| head $topToken$ | eval signature_slice = "Total: " + service_offering_name + ": " + Total_count | fields signature_slice, Total_count </CODE></PRE> <P>Thanks in advance.</P> Thu, 11 Feb 2016 16:39:49 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-to-compare-data-between-two-months/m-p/201634#M58418 rahhali22 2016-02-11T16:39:49Z https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-to-compare-data-between-two-months/m-p/201635#M58419 <P>Try something like this</P> <PRE><CODE>index=aut_kpi2 earliest=@mon latest=@m $servicesToken$ $catalogToken$ $subscriptionToken$ | chart count as Total_count_ThisMonth by service_offering_name | sort -Total_count| head $topToken$ | eval signature_slice = "Total: " + service_offering_name + ": " + Total_count | fields signature_slice, Total_count | append [search index=aut_kpi2 earliest=-1y@mon latest=-1y@mon+1mon $servicesToken$ $catalogToken$ $subscriptionToken$ | chart count as Total_count_LastYearThisMonth by service_offering_name | sort -Total_count_LastYearThisMonth | head $topToken$ | eval signature_slice = "Total: " + service_offering_name + ": " + Total_count_LastYearThisMonth | fields signature_slice, Total_count_LastYearThisMonth ] | stats values(*) as * by service_offering_name </CODE></PRE> Thu, 11 Feb 2016 17:49:57 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-pie-chart-to-compare-data-between-two-months/m-p/201635#M58419 somesoni2 2016-02-11T17:49:57Z