https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-output-to-show-on-a-radial/m-p/277021#M83548 <P>Im sorry I meant the radial gauge for a dashboard option does that help?</P> Tue, 20 Oct 2015 15:32:29 GMT TJ0214 2015-10-20T15:32:29Z https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-output-to-show-on-a-radial/m-p/277019#M83546 <P>I am trying to show the total amount of space we are using in a box right now for a dashboard. Here is my following serach, but I can't get the output to show on the needle. I was hoping it would work. Any ideas?</P> <PRE><CODE>index=es_sec_box_ko sourcetype="box:users" | eval spaceUsed_GB=(space_used/1024/1024/1024) | where spaceUsed_GB &gt;0 |stats latest(spaceUsed_GB) as spaceUsed_GB count by login |addcoltotals | sort -spaceUsed_GB </CODE></PRE> <P>Thanks!</P> Tue, 20 Oct 2015 13:39:07 GMT https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-output-to-show-on-a-radial/m-p/277019#M83546 TJ0214 2015-10-20T13:39:07Z https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-output-to-show-on-a-radial/m-p/277020#M83547 <P>What do you mean by "show on the needle"? If you mean some kind of single-value visualization, then you need to get rid of the <CODE>by login</CODE> part of your search because this causes <CODE>stats</CODE> to not produce a single value.</P> Tue, 20 Oct 2015 13:58:40 GMT https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-output-to-show-on-a-radial/m-p/277020#M83547 woodcock 2015-10-20T13:58:40Z https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-output-to-show-on-a-radial/m-p/277021#M83548 <P>Im sorry I meant the radial gauge for a dashboard option does that help?</P> Tue, 20 Oct 2015 15:32:29 GMT https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-output-to-show-on-a-radial/m-p/277021#M83548 TJ0214 2015-10-20T15:32:29Z https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-output-to-show-on-a-radial/m-p/277022#M83549 <P>I took out by login and got no data.</P> Tue, 20 Oct 2015 15:34:49 GMT https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-output-to-show-on-a-radial/m-p/277022#M83549 TJ0214 2015-10-20T15:34:49Z https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-output-to-show-on-a-radial/m-p/277023#M83550 <P>Try this:</P> <PRE><CODE>index=es_sec_box_ko sourcetype="box:users" | dedup login | eval spaceUsed_GB=(space_used/1024/1024/1024) | stats sum(spaceUsed_GB) as total_spaceUsed_GB </CODE></PRE> <P>This will produce a single value that should display in your single-value visualization.</P> Tue, 20 Oct 2015 15:47:49 GMT https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-output-to-show-on-a-radial/m-p/277023#M83550 woodcock 2015-10-20T15:47:49Z https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-output-to-show-on-a-radial/m-p/277024#M83551 <P>Try something like this (little optimization done as well)</P> <PRE><CODE>index=es_sec_box_ko sourcetype="box:users" space_used&gt;0 |stats latest(space_used) as space_used by login | eval spaceUsed_GB=(space_used/1024/1024/1024)| stats sum(spaceUsed_GB) as spaceUsed_GB </CODE></PRE> Tue, 20 Oct 2015 16:16:18 GMT https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-output-to-show-on-a-radial/m-p/277024#M83551 somesoni2 2015-10-20T16:16:18Z