Hello Community,
i'm trying to use a pie chart instead of a single value chart to sum up values. The aim is to provide three pie charts showing results of some more detailed charts. Furthermore they should act like a traffic sign, to see very quick via colours if something went not as expected.
if i do the following, the chart is showing count 1 and red color but not the value itself.
index=... sourcetype=... Location=.... Product=$lbl_product$ Line=$lbl_line$ | dedup _time
| eval OEE_New = tonumber(OEE) | timechart avg(OEE_New) as AverageOEE | stats sum(AverageOEE) as SumOEE| eval SumOEE=case(SumOEE>=200,"red",SumOEE<=200,"green") | top SumOEE
.......
{"red":0xFF0000,"green":0xFFFF00}
hello there,
check out some nice options in the "Dashboards Examples" app:
https://splunkbase.splunk.com/app/1603/
also some very nice visualizations using SVG in this nice app:
https://splunkbase.splunk.com/app/3815/
hope it helps
hello there,
check out some nice options in the "Dashboards Examples" app:
https://splunkbase.splunk.com/app/1603/
also some very nice visualizations using SVG in this nice app:
https://splunkbase.splunk.com/app/3815/
hope it helps