Splunk Search

How do you create a permanently visible legend?

axdahl
Explorer

When I create a pie chart, I can use mouse over or mouse hover to see the legend but I want the legend to be visible all the time.

When I create a PDF of the dashboard there is no legend on the pie charts. How do I enable this?

Tags (4)
0 Karma

vaibhavbeohar
Path Finder

Hi...How to set layoutSprite properties to visible in XML?

"<?xml version='1.0' encoding='utf-8'?>




TicketAnalysis
TicketAnalysis
column



"

0 Karma

vaibhavbeohar
Path Finder

Do i have to give like following?

visible

0 Karma

bruceascot
Explorer

The trick is to concatenate the data series values into your pie slice label, as follows:

Example 1 for count

| stats count by op_eTOM
| eval op_eTOM_Slice=op_eTOM+ ": " + count + " Transactions"
| fields op_eTOM_Slice, count

Example 2 for total durations

| stats sum(Duration) as sum_Duration_Seconds by op_eTOM
| eval total_Minutes=round(sum_Duration_Seconds/60)
| eval op_eTOM_Slice=op_eTOM+ ": " + total_Minutes + " Minutes"
| fields op_eTOM_Slice, sum_Duration_Seconds

ChrisG
Splunk Employee
Splunk Employee

I haven't tried this myself, so it's a bit of a guess (someone else might give you a better answer), but have you set the layoutSprite properties to visible in the XML?

See http://docs.splunk.com/Documentation/Splunk/4.3/Developer/AdvChartingConfig-TextblockLayoutspriteSpr...

The tool tip properties (http://docs.splunk.com/Documentation/Splunk/4.3/Developer/CustomChartingConfig-Tooltip) inherit from layoutSprite.

0 Karma
Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...