Splunk Search

Show Total count on Stacked bar/column chart

arunbs
Explorer

I have simple stacked bar graph. I want to show the total of each stack and also want it part of the scheduled pdf. Can you please point me to the configuration needed?
TIA - Arun

Tags (2)

mihenn
Path Finder

Are there any new ideas for this problem? How do I get Splunk to write the sum per bar next to it? You can display the single values, the maximum value and the minimum value, but not the total. What is the reason for this?

0 Karma

lguinn2
Legend

The easiest way to do this would be to create a dashboard, and have the dashboard delivered on a schedule.
Your dashboard could have two searches, one which is a graphic and the other which shows the table with totals.

For example, search1 could be the stacked bar chart

yoursearchhere
| chart count by errorCode host

and search2 could be the table (even though you use the chart command)

yoursearchhere
| chart count by errorCode host
| addcoltotals

See how to Generate Dashboard PDFs and send via email here.

0 Karma

arunbs
Explorer

Yes, I already have a dashboard scheduled. I just want to show the total of each stacked bar, as that is an useful information. I don't want to have another table just for the totals. Please suggest.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...