Splunk n00b here with a question.
I have a query I would like to display on a bar graph dashboard visual. Here is the query:
index=wsi_tax_summary sourcetype=stash partnerId=* error_msg_service=* ein=* ein!="" tax_year=2019 capability=109*
| eval error_msg_service = case(match(error_msg_service, "OK"), "Success", 1==1, "Fail")
| stats dc(intuit_tid) as Total by partnerId error_msg_service
| chart limit=0 useother=f sum(Total) as Total by partnerId error_msg_service
| eval total_request = Fail + Success
| eval "Success Rate" = round(((Success/total_request)*100),2)
| fieldformat "Success Rate"=tostring('Success Rate')+"%"
| sort "Success Rate"
| fields partnerId "Success Rate"
Since I'm aiming for a bar graph, the values on Y axis should be partnerId and the X axis should be a value called "Success Rate", which I created with several eval statements. When I click into "visual", nothing produces. Looks like I can only do it with a chart or timechart function
Anyone know how I can achieve this?
↧