Hi @kahlerb,
To build a pie chart, search results should be formatted in a two-column, single series table. The first column would be the labels for the various slices of a pie chart, and the second column would be the values for each of those labels.
In this case, it sounds like your labels would be "success" and "failure". The values would be the count of successes and the count of failures.
See the documentation and examples here:
http://docs.splunk.com/Documentation/Splunk/6.3.1/Viz/Datastructurerequirementsforvisualizations#Pie_charts
The challenge here seems to be to work with the two "...count" keys/values in your data. As a start, this previous Answers post seems to be related (in particular, take a look at the second search example in this post):
https://answers.splunk.com/answers/174564/how-to-use-two-different-fields-to-create-a-pie-ch.html
I hope this helps! Let me know if you need other suggestions.
All best,
@frobinson_splunk
... View more