hello @rvisj
here i user an Instrumental Variable (... | eval var=1
)to use the chart command for the visualization you requested
in screenshot 1 you will see the lookup i created.
screenshot 2 has the search i used and bar chart
heres the search: | inputlookup payments.csv | eval var=1 | chart count(record) over var by payment_method
hope it helps
Like this:
Your Base Search Here | eval label="Payment Methods" | contingency label "payment method" | search label!="TOTAL"
Set the visualization to Bar Chart
and set the Stack Mode
to the one on the right (stacked).
thanks for your reply. I tried this but 'Total' is coming as a payment method and adding up in the chart
Also add | fields - Total TOTAL
to the end.
hello @rvisj
here i user an Instrumental Variable (... | eval var=1
)to use the chart command for the visualization you requested
in screenshot 1 you will see the lookup i created.
screenshot 2 has the search i used and bar chart
heres the search: | inputlookup payments.csv | eval var=1 | chart count(record) over var by payment_method
hope it helps
Working..thanks @adonio. Can we remover that 'var 1' label from Y-axis