Dashboards & Visualizations

How can I display the Y-axis in bar chart when its dependent on multiple values

Sss
Path Finder

I have data like this-

Sss_0-1687687835074.png

I need to represent this in bar chart-where x-axis(month) and y-axis(Total_value),

total_value is calculated as (Category_no/Total_no)*100 for each month

I have to represent this in bar chart,the problem is like i have more than one value for each month based on category_name-is there any way how I can combine these values of TOTAL_VALUE and show that under its respective Month

say for example-incase of JAN month-I need to get something like-((41+90)/(41+594))*100=Total_value

(This total value has to be shown under JAN month).

is there any way to do this ?

 

Labels (1)
Tags (1)
0 Karma
1 Solution

PickleRick
SplunkTrust
SplunkTrust

You can use the "stats" command to aggregate your data. For example:

<your_search>
| stats sum(CATEGORY_NO) as CATEGORY_NO sum(TOTAL_NO) as TOTAL_NO by MON
| eval TOTAL_VALUE=CATEGORY_NO/TOTAL_NO

View solution in original post

PickleRick
SplunkTrust
SplunkTrust

You can use the "stats" command to aggregate your data. For example:

<your_search>
| stats sum(CATEGORY_NO) as CATEGORY_NO sum(TOTAL_NO) as TOTAL_NO by MON
| eval TOTAL_VALUE=CATEGORY_NO/TOTAL_NO
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...