Dashboards & Visualizations

how to create a pie chart with different sum values

umsundar2015
Path Finder

Hi ,
I have values like

Failure Ignored Partial Success
0 803 23 0
24 0 0 0
192 1 0 0
23 6 21 45

3 2 4 31
5 89 4 85

My requirement is to create a pie chart with the above values ( i mean with each column total count).These total columns should be

Show breakdown by Success/ Failure / Partial Success / Ignored. Show a pie chart for the week

Can anyone help me .

0 Karma
1 Solution

kamlesh_vaghela
SplunkTrust
SplunkTrust

Hi @umsundar2015,

Can you please try following?

YOUR_SEARCH
| stats sum(Failure) as Failure sum(Ignored) as Ignored sum(Partial) as Partial sum(Success) as Success | transpose

View solution in original post

niketn
Legend

@umsundar2015 what does each row represent? Also what is your current query for above table? Do you want to show each row also as pie?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

umsundar2015
Path Finder

Hi,
Can you please help me to create a drill down for the above piechart

When i select anyone of the above values like (Success,Failure,Ignored,Partial) ,I have the row value as Name which has machine name as its values.

My search is ,
index=macqw2|fillnull|search name="Saqpedc102" |eventstats sum(Current_Failure) as Failure,sum(Current_Ignored) as Ignored,sum(Current_Partial) as Partial,sum(Current_Success) as Success |transpose|Rename "column" as Delta|search Delta="Ignored"|table Site Partial Success Failure Ignored

I am getting error for this when i click th pie chart .Please help me with the search

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

Hi @umsundar2015,

Can you please try following?

YOUR_SEARCH
| stats sum(Failure) as Failure sum(Ignored) as Ignored sum(Partial) as Partial sum(Success) as Success | transpose

umsundar2015
Path Finder

oh yes . It works .

Thank you ,
Kamalesh.

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

Hi @umsundar2015,

Glad to help you. Can you please accept the answer to help community.

Thanks
Happy Splunking

0 Karma

umsundar2015
Path Finder

Hi,
Can you please help me to create a drill down for the above piechart

When i select anyone of the above values like (Success,Failure,Ignored,Partial) ,I have the row value as Name which has machine name as its values.

My search is ,
index=macqw2|fillnull|search name="Saqpedc102" |eventstats sum(Current_Failure) as Failure,sum(Current_Ignored) as Ignored,sum(Current_Partial) as Partial,sum(Current_Success) as Success |transpose|Rename "column" as Delta|search Delta="Ignored"|table Site Partial Success Failure Ignored

I am getting error for this when i click th pie chart .Please help me with the search

0 Karma
Get Updates on the Splunk Community!

Pro Tips for First-Time .conf Attendees: Advice from SplunkTrust

Heading to your first .Conf? You’re in for an unforgettable ride — learning, networking, swag collecting, ...

Raise Your Skills at the .conf25 Builder Bar: Your Splunk Developer Destination

Calling all Splunk developers, custom SPL builders, dashboarders, and Splunkbase app creators – the Builder ...

Hunt Smarter, Not Harder: Discover New SPL “Recipes” in Our Threat Hunting Webinar

Are you ready to take your threat hunting skills to the next level? As Splunk community members, you know the ...