Use pie chart as single value (as traffic sign e.g.)

[EricMueller0619]

Hello Community,

i'm trying to use a pie chart instead of a single value chart to sum up values. The aim is to provide three pie charts showing results of some more detailed charts. Furthermore they should act like a traffic sign, to see very quick via colours if something went not as expected.

if i do the following, the chart is showing count 1 and red color but not the value itself.

index=... sourcetype=... Location=.... Product=$lbl_product$ Line=$lbl_line$ | dedup _time
| eval OEE_New = tonumber(OEE) | timechart avg(OEE_New) as AverageOEE | stats sum(AverageOEE) as SumOEE| eval SumOEE=case(SumOEE>=200,"red",SumOEE<=200,"green") | top SumOEE
-$timeframe$
.......
{"red":0xFF0000,"green":0xFFFF00}

[adonio · Accepted solution]

hello there,

check out some nice options in the "Dashboards Examples" app:
https://splunkbase.splunk.com/app/1603/
also some very nice visualizations using SVG in this nice app:
https://splunkbase.splunk.com/app/3815/

hope it helps