Forum Discussion

Steven_Su's avatar
Steven_Su
Copper Contributor
Feb 27, 2022

Barchart when the returned result is zero

Hi, we want to create a barchart for the severity of the incident. However, we only have High incident now. The result could not show the zero for the medium and low. Is there any other alternative approach for it? Thanks.

 

 

SecurityIncident 
|summarize count() by Severity
| render barchart

 

 

 

 

  • Steven_Su 

    This will create a entry for any named Severity of Zero

    let Sev_ = dynamic(['High','Medium','Low','Informational']);
    SecurityIncident 
    |mv-expand NewSev=Sev_
    |summarize Count = countif(NewSev==Severity) by Severity=tostring(NewSev)

     

     

  • Clive_Watson's avatar
    Clive_Watson
    Bronze Contributor

    Steven_Su 

    This will create a entry for any named Severity of Zero

    let Sev_ = dynamic(['High','Medium','Low','Informational']);
    SecurityIncident 
    |mv-expand NewSev=Sev_
    |summarize Count = countif(NewSev==Severity) by Severity=tostring(NewSev)

     

     

    • Steven_Su's avatar
      Steven_Su
      Copper Contributor
      Thanks for the reply and it is indeed the answer I want!

Resources