Dashboards & Visualizations

Pie chart to display upgrade adoption of our new app version based on fields

cbr654
Path Finder

Hello,
I am trying to track a a version upgrade rollout of an application in our environment. I would like to see a pie graph showing percentage of the old version verses the new version. The index and sourcetype are the same ( index=fee sourcetype=events). However, the versions of the upgrade are in 2 different fields ( AgentVersionold=9.3 AgentVersionnew=10.0) . How can get this info a pie graph? Thanks

0 Karma

kmorris_splunk
Splunk Employee
Splunk Employee

You could use the coalesce command to merge the two fields into a single field:

BASE SEARCH | eval AgentVersion = coalesce(AgentVersionold,AgentVersionnew) | stats count by AgentVersion

DalJeanis
Legend
index=fee sourcetype=events
| eval AgentVersion=coalesce(AgentVersionold, AgentVersionnew, 0.0)
| stats count by AgentVersion
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...