Hi,
I am new to Splunk dashboard development, so far I am creating KPI's using just 'single value'.
I have three KPI's that resulted in 600, 250, 150.
KPI 1 search expression - Result is 600 (example)
index=indexname kubernetes.container_name=name1
MESSAGE = "*search for code1*"
| spath output=msg path=MSG
| table _time msg
| stats count as count1
KPI 2 search expression - Result is 250 (example)
index=indexname kubernetes.container_name=name2
MESSAGE = "*search for code2*"
| spath output=msg path=MSG
| table _time msg
| stats count as count2
KPI 3 search expression - Result is 150 (example)
index=indexname kubernetes.container_name=name3
MESSAGE = "*search for code3*"
| spath output=msg path=MSG
| table _time msg
| stats count as count3
I have shown above KPI's as numbers in the dashboard. However, I would like show a pie chart with 60%, 25% and 15% share for above numbers. Could you anyone please help me what would be search expression to create this chart?
Thanks in advance.
Raju
... View more