index="wineventlog" sourcetype="script:installedapps"
| chart values(*) as * count by DisplayName
| fields DisplayName, DisplayVersion, host, count
| search DisplayName=*
| sort host, DisplayName
How I can visual this in pie chart? I would like to show in pie chart with top 10 software and counts. Allow drill down to each of the software.
sample:
index=_internal
| top name
| eval host="host".random() % 5
| rename name as DisplayName , percent as DisplayVersion
| sort host, DisplayName
| eval Names=host."_".DisplayName."_".DisplayVersion
| table Names count
Thank you for your response. Sry for the late response. I'll give a shot and get back to you.