Splunk Search

Data in source shows Y/N for fields investor, borrower, guarantor, benefic for each customer. How can I show pie chart?

cadrija
Path Finder

I have data in source which shows Y/N for fields investor, borrower, guarantor, benefic for each customer. Need to show a pie chart that shows count of investor, borrower, guarantor, benefic that are Y based on the customer ID.

Like if a customer has only investor = Y, then investor count will be 1

If a customer has all the fields = Y, then all the params count will be 1 only.

Below is the data snip

index="customerdata" | table CUS_CID_CUST_ID,CUS_IND_INVESTOR, CUS_IND_BORROWER, CUS_IND_GUARANTOR, CUS_IND_BENEFIC

cadrija_0-1638953250335.png

User wants to see like this

cadrija_1-1638953304325.png

 

Labels (1)
0 Karma

cadrija
Path Finder

@ITWhisperer Kindly help me know if this is possible.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| makeresults count=50
| eval letters=split("0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ","")
| eval CUS_CIS_CUST_ID=mvindex(letters,random()%36).mvindex(letters,random()%36).mvindex(letters,random()%36).mvindex(letters,random()%36)
| fields - _time letters
| eval CUS_IND_INVESTOR=mvindex(split("YN",""),random()%2)
| eval CUS_IND_BORROWER=mvindex(split("YN",""),random()%2)
| eval CUS_IND_GUARANTOR=mvindex(split("YN",""),random()%2)
| eval CUS_IND_BENEFIC=mvindex(split("YN",""),random()%2)




| untable CUS_CIS_CUST_ID type boolean
| stats count(eval(boolean="Y")) as count by type
0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...