Dashboards & Visualizations

How can I display the Y-axis in bar chart when its dependent on multiple values

Sss
Path Finder

I have data like this-

Sss_0-1687687835074.png

I need to represent this in bar chart-where x-axis(month) and y-axis(Total_value),

total_value is calculated as (Category_no/Total_no)*100 for each month

I have to represent this in bar chart,the problem is like i have more than one value for each month based on category_name-is there any way how I can combine these values of TOTAL_VALUE and show that under its respective Month

say for example-incase of JAN month-I need to get something like-((41+90)/(41+594))*100=Total_value

(This total value has to be shown under JAN month).

is there any way to do this ?

 

Labels (1)
Tags (1)
0 Karma
1 Solution

PickleRick
SplunkTrust
SplunkTrust

You can use the "stats" command to aggregate your data. For example:

<your_search>
| stats sum(CATEGORY_NO) as CATEGORY_NO sum(TOTAL_NO) as TOTAL_NO by MON
| eval TOTAL_VALUE=CATEGORY_NO/TOTAL_NO

View solution in original post

PickleRick
SplunkTrust
SplunkTrust

You can use the "stats" command to aggregate your data. For example:

<your_search>
| stats sum(CATEGORY_NO) as CATEGORY_NO sum(TOTAL_NO) as TOTAL_NO by MON
| eval TOTAL_VALUE=CATEGORY_NO/TOTAL_NO
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...