Splunk Search

How to build a multi-level piechart?

mihenn
Path Finder

Hello,

I am searching for a possibility to build a multi-level piechart in Splunk. Does anyone knew if the is an built in function or app for this?

I'm looking for something like this example: http://www.newarkha.org/currunitsvac/Dashboard/PowerCharts%20XT/Contents/MultiLevelPie/Overview.html

Thank you.

1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

This is referred to as a "Sunburst". Check this app for an example on how to implement using the pre-6.4 methods. There is not one currently for >=6.4.

https://splunkbase.splunk.com/app/2717/

You can also try and implement one using d3 (example: https://bl.ocks.org/kerryrodden/477c1bfb081b783f80ad)

View solution in original post

alacercogitatus
SplunkTrust
SplunkTrust

This is referred to as a "Sunburst". Check this app for an example on how to implement using the pre-6.4 methods. There is not one currently for >=6.4.

https://splunkbase.splunk.com/app/2717/

You can also try and implement one using d3 (example: https://bl.ocks.org/kerryrodden/477c1bfb081b783f80ad)

mihenn
Path Finder

The d3 solution looks great, I will try this.

0 Karma

pratibha2018
Explorer

@alacercogitatus
Do I get the documentation of https://splunkbase.splunk.com/app/2717/ ??

0 Karma

mihenn
Path Finder

My link was deleted by the System, just google for multi-level piechart for an example.

0 Karma

aaraneta_splunk
Splunk Employee
Splunk Employee

@mihenn - Just so you know, you don't have enough karma points yet to post live links. So, I've edited your question so that your link text will show; that way users can just copy and paste.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...