Splunk Search

How to show multiple values in a Pie chart?

shiv1593
Communicator

Hi All,

I have a dashboard, which contains a pie chart, that looks like this.

alt text

As visible, there are only 5 values in it. I need to show more values in it, like in the next pie chart, and remove that 0% from Others. It should not be 0%.

alt text

Any help will be highly appreciated.

0 Karma

somesoni2
Revered Legend

You would need to set charting.chart.sliceCollapsingThreshold attribute in your pie chart visualization. By default any slice whose percent value is less than 0.01 of pie or 1% are collapsed into other. You can decrease this value per your need. See this for more information.

https://docs.splunk.com/Documentation/SplunkCloud/6.6.3/Viz/ChartConfigurationReference#Pie_charts

0 Karma

shiv1593
Communicator

Hello,

I tried changing the value, but no luck. I even reduced it to 0.001, still there are only 5 values.

0 Karma

niketn
Legend

What is the query you are using? Can you add the results from the table which your query builds?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

shiv1593
Communicator

Query:

Host=sss Call_DESCRIPTION_Text="" MEDIUM="" CALL_NUMBER="" MEDIUM=""
| stats count(CALL_NUMBER) AS "Ticket Count" BY Call_DESCRIPTION_Text MEDIUM
| chart limit=0 usenull=f sum("Ticket Count") OVER Call_DESCRIPTION_Text BY MEDIUM
| rename Call_DESCRIPTION_Text AS "Top Issues Reported"
| addtotals
| sort - Total

Here are a few examples of the stats data of my query.

Top Issues Reported Chat Fax Mail Own Phone Portal
REMOTE ACCESS RELATED ISSUES 14 3584 2 56508 3162
USER REQUESTING INFORMATION 1 3611 1641 1692
WINDOWS PASSWORD ISSUES 28 6244 15
AD PASSWORD RESET ISSUES 1 3340 989 794
MISCELLANEOUS PASSWORD 280 3353 51
MCAFEE LOGIN RELATED ISSUES 11 3586 3
USER LOGIN ISSUE 185 3300 35
CONNECTING TO VPN RELATED 1 87 3253 72

0 Karma

shiv1593
Communicator

Sorry for the gibrish data values, as I am unable to add an image in the answer.

0 Karma

493669
Super Champion

try to post image in imgur and share url to get more clarity ...

0 Karma
Get Updates on the Splunk Community!

Cloud Platform | Customer Change Announcement: Email Notification Will Be Available ...

The Notification Team is migrating our email service provider since currently there’s no support ...

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

To start, if you're new to synthetic monitoring, I recommend exploring this synthetic monitoring overview. In ...

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk Edge Processor offers more efficient, flexible data transformation – helping you reduce noise, control ...