Dashboards & Visualizations

Pie chart show values section wise

rj1408
Path Finder

base search | stats dc(TransactionID),count(StatusSuccess), count(StatusFailure) as count by MainMethod |rename MainMethod as MicroService count(StatusSuccess) as Success count as Failed | replace LostStolen with LostandStolen RetailConversion with TransactionRetailConversion TempCreditLimit with TemporaryCreditLimitIncrease


Hi,  in the above query I want to add pie chart as visualization, right now in pie chart it is only showing the no of transactions hit per function and ignoring the Success and Failed status.

What i want is when I hover over the functions in  piechart I want to see the no Failed and Sucess Tranactions. How do i do that?


Labels (1)
Tags (2)
0 Karma

rj1408
Path Finder

Hi anyone? Ill again repost if the question isnt clear

0 Karma

rj1408
Path Finder
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

The standard pie chart does not support the functionality you are after.

0 Karma

rj1408
Path Finder

Any other vizualization that can tell me total, success and failure?

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You could use a stacked column chart of success and failure so the total height of the column is the total.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

    Are you ready to transform how your team handles complex data requests? We invite you to our upcoming ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...