Dashboards & Visualizations

How to create Splunk table to piechart?

Marco_Develops
Path Finder

Currently, I have a Table that gives me Severity Categories. 

Sevcat I Sevcat II Sevcat III
5 10 12

 

I'm using the following SPL to generate this table:

 

|eval CATI = if(SEVCAT="I", 1,0) 
|eval CATII = if(SEVCAT="II", 1,0)
|eval CATIII = if(SEVCAT="III", 1,0)
|stats sum(CATI) as "Sevcat I" sum(CATII) as "Sevcat II" sum(CATIII) as "Sevcat III"
|table "Sevcat I" "Sevcat II" "Sevcat III"

 

Is there some way to convert this table into a piechart. 

Any help is appreciated 🙂
-Marco 

Labels (4)
0 Karma
1 Solution

somesoni2
Revered Legend

Give this a try

.. Your base search..
|eval SEVCAT = "Sevcat ".SEVCAT
| stats count by SEVCAT

View solution in original post

somesoni2
Revered Legend

Give this a try

.. Your base search..
|eval SEVCAT = "Sevcat ".SEVCAT
| stats count by SEVCAT
Get Updates on the Splunk Community!

Maximize the Value from Microsoft Defender with Splunk

<P style=" text-align: center; "><span class="lia-inline-image-display-wrapper lia-image-align-center" ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

<FONT size="5"><FONT size="5" color="#FF00FF">Get the latest news and updates from the Splunk Community ...