Greetings,
Since an update (I don't know what version to what version, sorry!), one of my dashboards with pie chart is showing "other", and I don't know why.
My saved search is pretty basic:
sourcetype="squid" action="*" uri_host="youtube.com"| top 10 username
My dashboard module includes:
name="charting.chart.sliceCollapsingThreshold">0
But it doesn't seem to work.
Restructuring my search was the only way to resolve this.
sourcetype="squid" action="*" uri_host="youtube.com" | stats count by username | sort 10 -count
Try this:
sourcetype="squid" action="*" uri_host="youtube.com"| top 10 username useother="f"
Exactly.I tried to copy it here, but the formatting was terrible. 😉
And your code is something like this ?
No go. I attempted it, even though by using "top" it should inherently exclude other. The query does not include 'other' when I run it in the search. It does, however, in a dashboard.