Currently, I have a Table that gives me Severity Categories.
Sevcat I | Sevcat II | Sevcat III |
5 | 10 | 12 |
I'm using the following SPL to generate this table:
|eval CATI = if(SEVCAT="I", 1,0)
|eval CATII = if(SEVCAT="II", 1,0)
|eval CATIII = if(SEVCAT="III", 1,0)
|stats sum(CATI) as "Sevcat I" sum(CATII) as "Sevcat II" sum(CATIII) as "Sevcat III"
|table "Sevcat I" "Sevcat II" "Sevcat III"
Is there some way to convert this table into a piechart.
Any help is appreciated 🙂
-Marco
Give this a try
.. Your base search..
|eval SEVCAT = "Sevcat ".SEVCAT
| stats count by SEVCAT
Give this a try
.. Your base search..
|eval SEVCAT = "Sevcat ".SEVCAT
| stats count by SEVCAT