Splunk Search

How to aggregate percentage information in pie chart labels?

snemiro_514
Path Finder

I would like to aggregate the % info in the pie labels, so it will read:

"OK (77%)" instead of OK
"ERRORS (23%)" instead of ERRORS

Is there any straightforward way to do it?

1 Solution

martin_mueller
SplunkTrust
SplunkTrust

I don't know of a way. I believe the percentage is calculated within the charting JS, so you're not going to achieve anything within the search... and I don't see any setting to configure the rounding behaviour. The browser locale seems to be passed to the percentage formatting code, but I don't see how that would have a lot of sway over the number of decimal points. Additionally, changing the locale for this would probably cause more issues elsewhere than would be solved here.

0 Karma

snemiro_514
Path Finder

Any way to round the % ? It's showing 3 decimal places and I would like to chop them.... something like| eval internalperc=round(internalperc,0)

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

maffreitas
Path Finder

Hi @martin_mueller, do you know if can we show de value inside the slice?

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

You should ask this as a new question. Not only will you get the attention a new question deserves and not pollute two-year-old other questions with varying potentially version-specific info, but also make it easier for others to find what they need.

Off the top of my head I don't think the built-in pie charts have an option to move the labels to the inside of the pie, but you're always free to build a custom visualization and publish that as an app on splunkbase 🙂

jackpal
Path Finder

Sorry for the dumb question but where is this file that needs to be modified ?

0 Karma

balazsg
New Member

Check Edit Source when you are in a Dashboard.
paste
<option name="charting.chart.showPercent"> 1</option>

0 Karma

snemiro_514
Path Finder

Great! tks.

0 Karma
Get Updates on the Splunk Community!

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

Industry Solutions for Supply Chain and OT, Amazon Use Cases, Plus More New Articles ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...