Join the Conversation
- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Re: how to create a pie chart with different sum ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi ,
I have values like
Failure Ignored Partial Success
0 803 23 0
24 0 0 0
192 1 0 0
23 6 21 45
3 2 4 31
5 89 4 85
My requirement is to create a pie chart with the above values ( i mean with each column total count).These total columns should be
Show breakdown by Success/ Failure / Partial Success / Ignored. Show a pie chart for the week
Can anyone help me .
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @umsundar2015,
Can you please try following?
YOUR_SEARCH
| stats sum(Failure) as Failure sum(Ignored) as Ignored sum(Partial) as Partial sum(Success) as Success | transpose
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@umsundar2015 what does each row represent? Also what is your current query for above table? Do you want to show each row also as pie?
| makeresults | eval message= "Happy Splunking!!!"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Can you please help me to create a drill down for the above piechart
When i select anyone of the above values like (Success,Failure,Ignored,Partial) ,I have the row value as Name which has machine name as its values.
My search is ,
index=macqw2|fillnull|search name="Saqpedc102" |eventstats sum(Current_Failure) as Failure,sum(Current_Ignored) as Ignored,sum(Current_Partial) as Partial,sum(Current_Success) as Success |transpose|Rename "column" as Delta|search Delta="Ignored"|table Site Partial Success Failure Ignored
I am getting error for this when i click th pie chart .Please help me with the search
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @umsundar2015,
Can you please try following?
YOUR_SEARCH
| stats sum(Failure) as Failure sum(Ignored) as Ignored sum(Partial) as Partial sum(Success) as Success | transpose
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
oh yes . It works .
Thank you ,
Kamalesh.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @umsundar2015,
Glad to help you. Can you please accept the answer to help community.
Thanks
Happy Splunking
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Can you please help me to create a drill down for the above piechart
When i select anyone of the above values like (Success,Failure,Ignored,Partial) ,I have the row value as Name which has machine name as its values.
My search is ,
index=macqw2|fillnull|search name="Saqpedc102" |eventstats sum(Current_Failure) as Failure,sum(Current_Ignored) as Ignored,sum(Current_Partial) as Partial,sum(Current_Success) as Success |transpose|Rename "column" as Delta|search Delta="Ignored"|table Site Partial Success Failure Ignored
I am getting error for this when i click th pie chart .Please help me with the search
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Index This | What travels the world but is also stuck in place?
Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data
Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...
