Dashboards & Visualizations

Pie chart of multi rows

preben12
Communicator

I have the following search

index="surveillance-status" source="rest://drip status" OR source="rest://drip-status2" | stats count by source, status

It gives me 4 rows with the fields source, status and a count for each, since the status can be either OK or ERROR

How can i turn this into a pie chart that shows a slice fore each source by statusalt text

Tags (1)
0 Karma
1 Solution

preben12
Communicator

Will answer this my self.

I just did
index="surveillance-status" source="rest://drip status" OR source="rest://drip-status2" | chart count by source, status

View solution in original post

0 Karma

preben12
Communicator

Will answer this my self.

I just did
index="surveillance-status" source="rest://drip status" OR source="rest://drip-status2" | chart count by source, status

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...