Splunk® Enterprise

Data Model and Pivot Tutorial

Splunk Enterprise version 7.0 is no longer supported as of October 23, 2019. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise. For documentation on the most recent version, go to the latest release.

Create a pivot chart

In the previous topic you used Pivot visualization editor to build a table. In this topic, you will use the same dataset to create chart visualizations.

Define a new Pivot

  1. From the Splunk bar, select Settings > Data models.
  2. Select the Buttercup Games data model.
  3. In the Datasets editor page, click Pivot.
  4. In the Select a Dataset page, select the Successful Purchases child dataset.

    The New Pivot editor for Successful Purchases opens.

    7.0 dmtutorial successful purchases pivot.png

Add Pivot elements

For the pivot chart, let's report on the count of successful purchases by category. To do this, you will add a Split Row using the categoryId field.

  1. Under Split Rows, click + and select categoryId from the list.
    6.2tutorial pivot splitrow chart.png

  2. For Label type Category.
  3. 7.0 dmtutorial pivot splitrow chart2.png
  4. Click Add to table.
  5. The Pivot table displays a list of the product categories and a count of the successful purchases.
    The next step is to change the table into a chart.
    7.0 dmtutorial pivot splitrow chart3.png

Change the visualization type

  1. Click the Column Chart icon from the visualization bar.
    6.5Tutorial Pivot Column Visualization.png
    The display changes to show you the options for the Column chart visualization.
    • Column charts use the first split row element in pivot table definitions to provide their X-axis values. In this case, that Split Row is Category.
    • Column charts use the first column value element in pivot table definitions to provide their Y-axis values. Here, that Column Value is Count of Successful Purchases.
    6.5Tutorial Pivot Pie Visualization.png

  2. This data can also be visualized as a pie chart.

  3. Click the Pie Chart icon from the visualization bar.
    The display changes to show you the options for the Pie chart visualization.
    • Pie charts use the values from the first Split Row element (Category) to determine the number and colors of their slices.
    • Pie charts use the first Column Value element (Count of Successful Purchases) to determine the relative sizes of their slices.
    6.5Pivot Tutorial Pie Visualization.png
    Hover over a slice of the pie chart to view the metrics. You will see Category, Count of Successful Purchases, and the percentage that the slice of pie is of the total Count of Successful Purchases.

Next steps

In this chapter you created three pivots and saved two of them as reports. This last pivot chart, you will save as a dashboard panel. Continue to the next chapter to read about dashboards.

Last modified on 16 February, 2018
Create a pivot table   About dashboards

This documentation applies to the following versions of Splunk® Enterprise: 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters