( | stats count by app ) I have 30 apps to be displayed in a Piechart format. But in visualization i can view only 14 of them are showing the label names of the app. Why all the 30 apps not getting displayed? Mostof them which have fewer count are showing the labels.
| makeresults count=100 | streamstats count | eval count=count+64 | eval key=printf("%c",count) | where match(key,"[A-z]") | eval count=random() | table key count
Displaying with14 label is too small
by default in Pie chart are visualized only field values that have more than 5% of the total data, the other are in "Others" as ayou can see at https://docs.splunk.com/Documentation/Splunk/8.1.1/Viz/PieChart
To avoid this, see in Format of the Pie Chart: there's an option "Minimun size" that says the minimum size of values to aggregate in others when there are more than 10 slices.