Splunk Search

help me with Pie Chart

sravankaripe
Communicator

----------------------| stats count by status | eval status=" Status: ".status.", Count : ".count|makemv delim="," status

alt text

in above pie chart it showing

Status: 200, Count: 10
---------------------------
Status: 400 Count: 20
---------------------------

i want to display it as
Status: 200
Count: 10
---------------------------
Status: 400
Count: 20
---------------------------

please help me with this

Tags (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Try this. The makemv command is not needed.

... | stats count by status | eval status=" Status: ".status."\nCount : ".count
---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Try this. The makemv command is not needed.

... | stats count by status | eval status=" Status: ".status."\nCount : ".count
---
If this reply helps you, Karma would be appreciated.
0 Karma

sravankaripe
Communicator

No, its not working
i am got search result like this
Status: 200\nCount : 10
Status: 302\nCount : 20

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Sorry, I thought that would work.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...