Dashboards & Visualizations

pie chart with 2 search results

knarayana
New Member

Hi

Search
index=index1 word1 AND word2 | stats count as card | appendcols [search index=index1 word1 AND NOT word2 | stats count as mail ]

Result
card mail
123 99

Expected Result
card 123
mail 99

so, i can see the results in a PIE chart

Thanks
nkk

Tags (1)
0 Karma
1 Solution

woodcock
Esteemed Legend

Like this:

index1 word1 OR word2 | stats count(eval(searchmatch("word1 AND word2")) AS card count(eval(searchmatch("word1 AND NOT word2")) AS mail | transpose

View solution in original post

0 Karma

woodcock
Esteemed Legend

Like this:

index1 word1 OR word2 | stats count(eval(searchmatch("word1 AND word2")) AS card count(eval(searchmatch("word1 AND NOT word2")) AS mail | transpose
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...