Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Piechart Trellis Layout

$
0
0
I have a regular pie chart which displays a breakdown of all Operating Systems but after trying to use the Trellis drill down it does not work (Screenshot below) Please see my dashboard source code.
*machine="**"*companyCodecompanyCodeindex=ad source=otl_adouscan description=* description!="" | regex description="^[A-Za-z0-9]{2,4}$" | dedup name, description | eval companyCode=upper(description) | eval companyName =lower(name) | dedup companyCode | table companyCode | sort companyCode-24h@hnowAllAllModel=""ModelModel`GEN_ProductionWorkstations` | rename User_Name0 as LastKnownUser, Caption0 as operatingSystem, Version0 as Version, Model0 as Model | eval machine=lower(Name0) | search $companyCode$ | dedup Model | table Model | sort Model-24h@hnow**All*operatingSystem=""operatingSystemoperatingSystemindex=sccm sourcetype="otl_dbin_machineinfo" host=opspkhf03p source=dbmon-dump://otl_db_opsccmsql_sccm/otl_dbin_machineinfo | rename User_Name0 as LastKnownUser, Caption0 as operatingSystem, Version0 as Version, Model0 as Model | eval machine=lower(Name0) | search $companyCode$ , $model$ | dedup operatingSystem | table operatingSystem | sort operatingSystem-24h@hnow*-15mnow
Operating System for client`GEN_ProductionWorkstations` | rename User_Name0 as LastKnownUser, Caption0 as operatingSystem, Version0 as Version, Model0 as Model | search $companyCode$ | dedup machine | stats count by operatingSystem$Test_Time_Range.earliest$$Test_Time_Range.latest$
[1]: /storage/temp/226759-splunk-sc.png ![alt text][1]

Viewing all articles
Browse latest Browse all 47296