- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Re: how to create a pie chart with different sum ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi ,
I have values like
Failure Ignored Partial Success
0 803 23 0
24 0 0 0
192 1 0 0
23 6 21 45
3 2 4 31
5 89 4 85
My requirement is to create a pie chart with the above values ( i mean with each column total count).These total columns should be
Show breakdown by Success/ Failure / Partial Success / Ignored. Show a pie chart for the week
Can anyone help me .
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @umsundar2015,
Can you please try following?
YOUR_SEARCH
| stats sum(Failure) as Failure sum(Ignored) as Ignored sum(Partial) as Partial sum(Success) as Success | transpose
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@umsundar2015 what does each row represent? Also what is your current query for above table? Do you want to show each row also as pie?
| makeresults | eval message= "Happy Splunking!!!"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Can you please help me to create a drill down for the above piechart
When i select anyone of the above values like (Success,Failure,Ignored,Partial) ,I have the row value as Name which has machine name as its values.
My search is ,
index=macqw2|fillnull|search name="Saqpedc102" |eventstats sum(Current_Failure) as Failure,sum(Current_Ignored) as Ignored,sum(Current_Partial) as Partial,sum(Current_Success) as Success |transpose|Rename "column" as Delta|search Delta="Ignored"|table Site Partial Success Failure Ignored
I am getting error for this when i click th pie chart .Please help me with the search
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @umsundar2015,
Can you please try following?
YOUR_SEARCH
| stats sum(Failure) as Failure sum(Ignored) as Ignored sum(Partial) as Partial sum(Success) as Success | transpose
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
oh yes . It works .
Thank you ,
Kamalesh.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @umsundar2015,
Glad to help you. Can you please accept the answer to help community.
Thanks
Happy Splunking
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Can you please help me to create a drill down for the above piechart
When i select anyone of the above values like (Success,Failure,Ignored,Partial) ,I have the row value as Name which has machine name as its values.
My search is ,
index=macqw2|fillnull|search name="Saqpedc102" |eventstats sum(Current_Failure) as Failure,sum(Current_Ignored) as Ignored,sum(Current_Partial) as Partial,sum(Current_Success) as Success |transpose|Rename "column" as Delta|search Delta="Ignored"|table Site Partial Success Failure Ignored
I am getting error for this when i click th pie chart .Please help me with the search
Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!
Transform your security operations with Splunk Enterprise Security
Splunk Admins and App Developers | Earn a $35 gift card!
