I have the following bar chart:
The query for this bar chart is this:
| inputlookup Migration-Status-All.csv
| search Vendor = "McAfee"
| stats count by "Migration Comments"
| eventstats sum(count) as Total
| eval perc=round(count*100/Total,2)
| eval dummy = 'Migration Comments'
| chart sum(perc) over "Migration Comments" by dummy
I need to have the "In Progress" bar to be yellow and the "Not Started" bar to be red ..... I tried using an eval and Case but didn't work for me.
How can this be done?