Hi .
I have plotted a pie graph say with the values NOT,SOT,...Now i need to expand these values right side of the pie graph .so that it makes sense for the user wat is NOT etc..
Some thing like .
NOT - Notification
I need to add this text beside the pie graph . is it possible in splunk ?? i tried writing the text in HTML module but it didnt wokrked ? can you pls help ,
The html legend is the best method.
You need to edit the xml of the dashboard.
for simple xml see http://docs.splunk.com/Documentation/Splunk/5.0.1/Viz/PanelreferenceforSimplifiedXML#HTML_panel
< row > < graph >mygraph... < /graph > < html > my legend< /html > < /row >
Otherwise, you can add the definition directly to your fields in the search.
But your legends may always be cut if they are too long.
A last option is to display a pie chart AND a table of your results that will act as a legend. (see post process for using a single search to populate 2 panels)
example :
mysearch | stats count by country
| eval country=case(
country=="USA", country." - United States of Antares",
country=="USSR", country." - Union Sovereign of the Saturn Rings",
country=="FR", country." - Federation of Rigel",
country=="MV", country." - Merchants of Venus",
1==1,country." - unknown "
)