Splunk Cloud Platform

Custom Pie Chart

saibal6
Path Finder

I have  a requirement where I have to show a pie chart which shows pending/opened/assigned service request from last Feb to till now but the time span should be 40, as well as which services are older than 80 days. it will come in ">80" legend. Like in this way only (0-40, 40-80, >80)

 

My Search query is : 

index a
| table a b c d        [a b c d stands for a=user, b=date, c=service request number and d=days]
| chart count(c) by d span=40  

 

My Output :

days                 count(number)
0-40                          3111
40-80                       2252
80-120                      478
120-160                 2757


But I want my output in manner :
days                 count(number)
0-40                          3111
40-80                       2252
>80                           3235 (478+2757)

 

Is it possible to get my desired output in the pie chart?

Please give me an example with a search query if we can do that. 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...