Splunk Search

How to show multiple values in a Pie chart?

shiv1593
Communicator

Hi All,

I have a dashboard, which contains a pie chart, that looks like this.

alt text

As visible, there are only 5 values in it. I need to show more values in it, like in the next pie chart, and remove that 0% from Others. It should not be 0%.

alt text

Any help will be highly appreciated.

0 Karma

somesoni2
Revered Legend

You would need to set charting.chart.sliceCollapsingThreshold attribute in your pie chart visualization. By default any slice whose percent value is less than 0.01 of pie or 1% are collapsed into other. You can decrease this value per your need. See this for more information.

https://docs.splunk.com/Documentation/SplunkCloud/6.6.3/Viz/ChartConfigurationReference#Pie_charts

0 Karma

shiv1593
Communicator

Hello,

I tried changing the value, but no luck. I even reduced it to 0.001, still there are only 5 values.

0 Karma

niketn
Legend

What is the query you are using? Can you add the results from the table which your query builds?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

shiv1593
Communicator

Query:

Host=sss Call_DESCRIPTION_Text="" MEDIUM="" CALL_NUMBER="" MEDIUM=""
| stats count(CALL_NUMBER) AS "Ticket Count" BY Call_DESCRIPTION_Text MEDIUM
| chart limit=0 usenull=f sum("Ticket Count") OVER Call_DESCRIPTION_Text BY MEDIUM
| rename Call_DESCRIPTION_Text AS "Top Issues Reported"
| addtotals
| sort - Total

Here are a few examples of the stats data of my query.

Top Issues Reported Chat Fax Mail Own Phone Portal
REMOTE ACCESS RELATED ISSUES 14 3584 2 56508 3162
USER REQUESTING INFORMATION 1 3611 1641 1692
WINDOWS PASSWORD ISSUES 28 6244 15
AD PASSWORD RESET ISSUES 1 3340 989 794
MISCELLANEOUS PASSWORD 280 3353 51
MCAFEE LOGIN RELATED ISSUES 11 3586 3
USER LOGIN ISSUE 185 3300 35
CONNECTING TO VPN RELATED 1 87 3253 72

0 Karma

shiv1593
Communicator

Sorry for the gibrish data values, as I am unable to add an image in the answer.

0 Karma

493669
Super Champion

try to post image in imgur and share url to get more clarity ...

0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...