Hi there,  I'd like to custom the color of my spinners based on a specific value. The values are not numeric but string instead (High, medium, low). I know there is an option to set the color directly inside the search query but I don't know how to use it and I can't access to the documentation. My spinners must look like below image but in only 1 panel instead of 3 :  Hence, color has to change according to the level (high, medium, low). Thank you, Big Big Shak   ... View more

Hello there, Can someone explain to me why there is a second "average" when I hover one slice of the pie chart? The first "average" is my calculation, the second with the % ("average%") came out of nowhere and I don't know why they have different results. Can i get rid of it? In case you need my search :     index=blabla | stats count by category | eventstats sum(count) as total | eval average=round((count/total)*100,2) | sort 10 - average | fields category average     Thanks. ... View more

Hello there, I want to make a top 10 of applications based on top 10 of categories. Here is an example: Category Nb of alert / category Application Nb of alert (by app for this category) Cat1 8000 App1 1000   8000 App2 100   8000 App3 10 Cat2 5000 App1 10000   5000 App2 688 Cat3 300 App4 4560 So I know how to get the top 10 categories but from that I don't know how to get the top 10 applications for each category found previously. Here is what i've done so far:  (note that the 2nd column in my example doesn't exist in my query, it's just to make the example clearer)       index=my_index action=block [search index=my_index action=block | top category | table category] | stats count by category, app | stats values(app) AS apps, values(count) AS total by category       It gives me the 10 categories but they are sorted by alphabetic order instead of by number of block action and I have more than 10 applications on the second column, not sorted. Does anyone has a solution for that? It'd be lovely. Thanks in advance. ... View more