Are you a member of the Splunk Community?
- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Re: how to create a pie chart with different sum ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi ,
I have values like
Failure Ignored Partial Success
0 803 23 0
24 0 0 0
192 1 0 0
23 6 21 45
3 2 4 31
5 89 4 85
My requirement is to create a pie chart with the above values ( i mean with each column total count).These total columns should be
Show breakdown by Success/ Failure / Partial Success / Ignored. Show a pie chart for the week
Can anyone help me .
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @umsundar2015,
Can you please try following?
YOUR_SEARCH
| stats sum(Failure) as Failure sum(Ignored) as Ignored sum(Partial) as Partial sum(Success) as Success | transpose
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@umsundar2015 what does each row represent? Also what is your current query for above table? Do you want to show each row also as pie?
| makeresults | eval message= "Happy Splunking!!!"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Can you please help me to create a drill down for the above piechart
When i select anyone of the above values like (Success,Failure,Ignored,Partial) ,I have the row value as Name which has machine name as its values.
My search is ,
index=macqw2|fillnull|search name="Saqpedc102" |eventstats sum(Current_Failure) as Failure,sum(Current_Ignored) as Ignored,sum(Current_Partial) as Partial,sum(Current_Success) as Success |transpose|Rename "column" as Delta|search Delta="Ignored"|table Site Partial Success Failure Ignored
I am getting error for this when i click th pie chart .Please help me with the search
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @umsundar2015,
Can you please try following?
YOUR_SEARCH
| stats sum(Failure) as Failure sum(Ignored) as Ignored sum(Partial) as Partial sum(Success) as Success | transpose
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
oh yes . It works .
Thank you ,
Kamalesh.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @umsundar2015,
Glad to help you. Can you please accept the answer to help community.
Thanks
Happy Splunking
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Can you please help me to create a drill down for the above piechart
When i select anyone of the above values like (Success,Failure,Ignored,Partial) ,I have the row value as Name which has machine name as its values.
My search is ,
index=macqw2|fillnull|search name="Saqpedc102" |eventstats sum(Current_Failure) as Failure,sum(Current_Ignored) as Ignored,sum(Current_Partial) as Partial,sum(Current_Success) as Success |transpose|Rename "column" as Delta|search Delta="Ignored"|table Site Partial Success Failure Ignored
I am getting error for this when i click th pie chart .Please help me with the search
Good Sourcetype Naming
See your relevant APM services, dashboards, and alerts in one place with the updated ...
Splunk App for Anomaly Detection End of Life Announcement
