Dashboards & Visualizations

Pie Chart

skrishna
New Member
I found that the count with the 'Other' slice in the pie graph visualization available in splunk is not actually the count of events. From documentation I found that it is the count of 'Slices' with less contribution. 
Is there any way to print the count of events with the 'Other' slice? Checked documentations and forums. Couldnt find any anything.
Labels (1)
0 Karma

jhanvidattani
Path Finder

@skrishna 

Let's say your SPL returns 15 results, then the pie chart will show the top 10 values with maximum count and showing the remaining 5 in Other fields.

 

To match with the event, you can separately execute panel query (which will have all results) and can match count with indexed data.

If you find my solution/debugging steps fruitful, then an upvote would be appreciated

0 Karma

bowesmana
SplunkTrust
SplunkTrust

Can you share you search. The 'count' of the other slice will be whatever gets aggregated into the other category. It will show other (x) where x is the number of aggregated rows, but the count value, if you hover of that segment will show you the actual count value.

0 Karma
Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...