Dashboards & Visualizations

Pie Chart

skrishna
New Member
I found that the count with the 'Other' slice in the pie graph visualization available in splunk is not actually the count of events. From documentation I found that it is the count of 'Slices' with less contribution. 
Is there any way to print the count of events with the 'Other' slice? Checked documentations and forums. Couldnt find any anything.
Labels (1)
0 Karma

jhanvidattani
Path Finder

@skrishna 

Let's say your SPL returns 15 results, then the pie chart will show the top 10 values with maximum count and showing the remaining 5 in Other fields.

 

To match with the event, you can separately execute panel query (which will have all results) and can match count with indexed data.

If you find my solution/debugging steps fruitful, then an upvote would be appreciated

0 Karma

bowesmana
SplunkTrust
SplunkTrust

Can you share you search. The 'count' of the other slice will be whatever gets aggregated into the other category. It will show other (x) where x is the number of aggregated rows, but the count value, if you hover of that segment will show you the actual count value.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...