Splunk Search

How does one create a pie chart that would result in 3 equal pie slices?

fdswitch
Explorer

I'm logging memory stats, and I have fields like "mem_free", "mem_used", and "mem_cache" that represent memory in MB.

Let's assume all three of these avg(fields) value is 33. How does one create a pie chart that would result in 3 equal pie slices?

0 Karma
1 Solution

woodcock
Esteemed Legend

Just add transpose, maybe something like this:

... | stats last(mem_*) AS mem_* | transpose

View solution in original post

woodcock
Esteemed Legend

Just add transpose, maybe something like this:

... | stats last(mem_*) AS mem_* | transpose

cmerriman
Super Champion

if they DON'T have equal values and, for whatever reason, you still want them to have equal slices, I'd create a dummy variable.

| stats last(mem_*) AS mem_* |transpose|eval column=column+" - "+'row 1'|eval sliceSize=33|fields - "row 1"

fdswitch
Explorer

I'm not trying to force 3 equal slices, moderator changed my topic. But useful information none the less, thanks.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...