How to create a pie chart for my search to show the percentage of each number displayed in the table?

[chadman]

I would like to create a pie chart for the following search.

sourcetype="my_sort" earliest=-30d| dedup host | table encrypt_c

This should show a long column of 2's with maybe a hand full of 1's.. I would like to show in a pie chart the percent of each number that is displayed in the column.

[woodcock · Accepted solution]

Try this:

sourcetype="my_sort" earliest=-30d | stats latest(encrypt_c) BY host

Then click on the visualization tab which should show you a pie chart with most values in "other".
Then save this as a dashboard panel and edit the XML to change the value of this parameter to 0 to disable collapsing; read about how the panel collapses values into "other" (see sliceCollapsingThreshold):

http://docs.splunk.com/Documentation/Splunk/6.2.3/AdvancedDev/CustomChartingConfig-chartlegend#piech...

By default, values that make up less that 1% of the whole are collapsed into "other".