- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Display pie value in pie chart without tooltip
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I am working on spkunk 6.2 and I have created a pie chart under splunk dashboard as a panel. Ineed to display the value against each pie in chart.
Is there a way to achieve it?
search_string| chart count(username) by application
Above query creates pie chart having information of application. But, it does not have count value for every application. Can you please help in adding the count value against application name in the chart?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
... | stats count(username) as count by application| eval pie_slice = count + " " + username | fields pie_slice, count
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
... | stats count(username) as count by application| eval pie_slice = count + " " + username | fields pie_slice, count
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Can anyone provide some useful answer?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have got the solution.
... | stats count(username) as count by application| eval pie_slice = count + " " + username | fields pie_slice, count
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
that's the answer I am referring ...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @ggangwar,
try this:
<option name="charting.chart.showPercent">true</option>
refer this answer: https://answers.splunk.com/answers/71090/how-to-display-the-count-in-piechart-as-labels.html
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This gives wrong value. It does not display the value of pie but some other percentage.
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
