Splunk Enterprise

help on a pie chart

jip31
Motivator

hi

i try to do a pie chart from the code below but it doesnt works

what is wrong please?

 

index_mesu sourcetype=sig sig_app="$site$" 
| fields sig_id site sig_app 
| rename sig_app as application 
| stats dc(sig_id) as Total by site application
| sort - Total limit=10
Labels (1)
Tags (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

A pie chart normally only has 2 dimensions (name and value), you have 3 (Total site application).

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

A pie chart normally only has 2 dimensions (name and value), you have 3 (Total site application).

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>