Splunk Search

How do you setup a pie chart for success / failures?

sunnyt
New Member

Query details:
index=my_app processcreditcheck tmLogging (failure OR success)

Result needed:
][1]

0 Karma

skoelpin
SplunkTrust
SplunkTrust

You should have a field dedicated to success or failure. If you don't have an existing field, you can write a regular expression to capture the "success" and "failure" values. Once you have these values in a field, you can then do something like this

... | stats count by <FIELD_NAME>

0 Karma
Get Updates on the Splunk Community!

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...

Starting With Observability: OpenTelemetry Best Practices

Tech Talk Starting With Observability: OpenTelemetry Best Practices Tuesday, October 17, 2023   |  11AM PST / ...

Streamline Data Ingestion With Deployment Server Essentials

REGISTER NOW! Every day the list of sources Admins are responsible for gets bigger and bigger, often making ...