Splunk Search

Why is my chart not displaying all field values?

rkaakaty
Path Finder

Hello,

My chart for some reason, isn't displaying the value "high" and it has the high count at the bottom of the graph when I want the count of the other types under the columns.

Here is my code:

index=nessus
| stats count(eval(risk_factor ="high")) as high count(eval(risk_factor ="medium")) as medium count(eval(risk_factor ="critical")) as critical count(eval(risk_factor ="low")) as low count(eval(risk_factor ="none")) as none 

alt text

0 Karma

DalJeanis
Legend

Try setting the visualization barchart format-

format - general - show data values - on
0 Karma

woodcock
Esteemed Legend

Why not just do this:

index=nessus | stats count BY risk_factor

DalJeanis
Legend

Not the answer to the question he asked, but a great answer nonetheless.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...