Dashboards & Visualizations

Pie chart help

Marco
Communicator

Hi Splunkers,

I am currently trying to create a pie chart that gets its data from a token:

host=* | eval $Overview$ | chart sum(Warning) as "Warnings"  sum(Violation)  as  Violations sum(Alerts) as Alerts  over sum(ALL)

I am looking to create a pie chart that shows these three values. Any help is appreciated 

 

Thank you,

Marco

Labels (5)
0 Karma
1 Solution

Marco
Communicator

Hi Splunkers,

I found the solution:

host=* | eval $Overview$ | chart sum(Warning) as "Warnings"  sum(Violation)  as  Violations sum(Alerts) as Alerts | transpose

 

I was missing the transpose command.

Thank you,

Marco 

View solution in original post

0 Karma

Marco
Communicator

Hi Splunkers,

I found the solution:

host=* | eval $Overview$ | chart sum(Warning) as "Warnings"  sum(Violation)  as  Violations sum(Alerts) as Alerts | transpose

 

I was missing the transpose command.

Thank you,

Marco 

0 Karma

to4kawa
Ultra Champion

sample:

| makeresults count=20
| eval Warning = random() %  20,Violation = random() % 20, Alerts = random() % 20
| rename COMMENT as "The sample. from here, the logic."
| chart sum(Warning) as "Warnings"  sum(Violation)  as  Violations sum(Alerts) as Alerts
| eval tmp="1"
| untable tmp Status Count
| fields - tmp
| rename COMMENT as "Viz >> Pie Chart"
0 Karma
Get Updates on the Splunk Community!

Happy CX Day to our Community Superheroes!

Happy 10th Birthday CX Day!What is CX Day? It’s a global celebration recognizing innovation and success in the ...

Check out This Month’s Brand new Splunk Lantern Articles

Splunk Lantern is a customer success center providing advice from Splunk experts on valuable data insights, ...

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...