visualize stats(sum)

[splunk_novice99]

Hello Splunkers

I can use stats count and visualize the output as a single value so its nice and big in that panel in my dashboard.

Is there a way to visualize the output from stats(sum) in a similar way.  Or just make the the single value in a field big and prominent in the dashboard?

|fields total|fieldformat "total" = round(total, 2)
| appendpipe
[ stats sum(total) as Grand_Total ]
|fields Grand_Total

output
------------------------------------
Grand_Total
103

[ITWhisperer · Accepted solution]

It doesn't matter to the Single Value viz (or any other viz for that matter) what the search was, it just visualises the result events appropriately, so, if your search uses sum() or count(), at the end of it you specify only one field, the Single Value viz will visualise this.

[splunk_novice99]

Thanks for your reply.  Yes, I had extra values in the output.  Once output was one single value it worked perfectly.  Thanks

[richgalloway]

The value in a Single Value viz scales automatically based on its size.  If you need a bigger image, make the panel bigger.

[splunk_novice99]

Thanks for your reply.  Yes it scales how I want it to once I actually had a single value in the output.