I have indexed a file in splunk, and can search related results by keywords. But if I want to show only two columns in a pie chart, how can just select these two?
here is some information about charting in general: http://www.splunk.com/base/Documentation/latest/User/UseReportingCommands
and it sounds as though you might also find the Splunk Tutorial useful:
http://www.splunk.com/base/Documentation/latest/User/WelcometotheSplunktutorial this tutorial walks you through how to use Splunk, including how to create reports.
