Splunk Search

## Calculate percentage of total and display as pie chart

Path Finder

I have total of 7M users. My splunk query shows the count of completed users. I want to draw a pie chart showing completed users vs Total users.

So far I have gotten this far

<< my query>> | eval TotalMax=7000000 | stats count(Path) as completed | eval perc=(completed/TotalMax)/100 | table completed,perc

count(Path) which is same as completed comes out as 200000
But perc is not getting calculated.  Am I missing anything ?

--Sunray

Labels (1)
• ### stats

1 Solution
SplunkTrust

Hi @balash1979,

After stats command only fields  that stats outputs are exist. On your case you are loosing TotalMax field, so perc cannot be calculated. Below should work;

``````    << my query>>
| stats count(Path) as completed
| eval TotalMax=7000000
| eval perc=(completed/TotalMax)/100
| table completed,perc``````

OR

``````    << my query>>
| eval TotalMax=7000000
| stats count(Path) as completed values(TotalMax) as TotalMax
| eval perc=(completed/TotalMax)/100
| table completed,perc``````

If this reply helps you an upvote is appreciated.

If this reply helps you an upvote is appreciated.
Tags (1)
Path Finder

Thanks. If i add "table completed, perc" , i can get the correct data.

How can i display this as a pie chart ? in the pie chart, i would like to see % completed out of the total. Thanks

SplunkTrust

Hi @balash1979,

After stats command only fields  that stats outputs are exist. On your case you are loosing TotalMax field, so perc cannot be calculated. Below should work;

``````    << my query>>
| stats count(Path) as completed
| eval TotalMax=7000000
| eval perc=(completed/TotalMax)/100
| table completed,perc``````

OR

``````    << my query>>
| eval TotalMax=7000000
| stats count(Path) as completed values(TotalMax) as TotalMax
| eval perc=(completed/TotalMax)/100
| table completed,perc``````

If this reply helps you an upvote is appreciated.

If this reply helps you an upvote is appreciated.
Tags (1)
Get Updates on the Splunk Community!

#### Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

#### Take the 2021 Splunk Career Survey for \$50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...

#### Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...