Grouping result after stats

[SplunkBaby]

Hi
I have a search like this
host=A |stats last("Status") by TaskId

I like to group the result of above query by Status and then display a pie chart.
I use transaction "Status" but doesn't work out.
Can anybody help me.

[SplunkBaby]

Thanks it is solved

[SplunkBaby]

I get the result.Result is based on TaskIds.
I want to group that result again based on Status.
for that i use like
host=A |stats last("Status") by TaskId | transaction "Status".
This is not working.How can i achieve this.

[richgalloway · Accepted solution]

In addition to Rocket66's comment, try this: 'host=A | stats last("Status") as LastStatus by TaskId | chart LastStatus'.

[richgalloway]

Please accept the answer if it is what got it worked out.

[SplunkBaby]

This worked out .Thanks man

[Rocket66]

Don't know, what the problem is ...

• do you get no results (as a list)?
• you get results but, the pie chart is rendered with wrong or no values?

Maybe your field "Status" is called "status" or "TaskId", "TaskID" or some (other) typo?

Greetz, Robert