Forum Discussion

endakelly's avatar
endakelly
Brass Contributor
Mar 27, 2020
Solved

Split visualisation in workbook

I'm working on a workbook/dashboard and I have this query which should show in a bar or area chart successful and failed logins by client app.   SigninLogs | where TimeGenerated > ago(7d) | wher...
  • CliveWatson's avatar
    CliveWatson
    Apr 01, 2020

    endakelly 

     

    How about splitting the count() ?

    SigninLogs
| where TimeGenerated > ago(30d)
| where isnotempty(ClientAppUsed)
| extend Result= iff(ResultType ==0 ,"failure" ,"success" )
| summarize fail=countif(Result=="failure") , success=countif(Result=="success") by   ClientAppUsed

     

endakelly's avatar
endakelly
Brass Contributor
Apr 01, 2020

Thanks for the reply CliveWatson 

 

That does work but it's not really what I'm after. Ideally I'd have a stacked chart so we could see the proportion of sign ins that were successful or failed versus the total.

 

It's very odd that the visualisation works in LA but not in the workbook.

CliveWatson's avatar
CliveWatson
Former Employee
Apr 01, 2020

endakelly 

 

How about splitting the count() ?

SigninLogs
| where TimeGenerated > ago(30d)
| where isnotempty(ClientAppUsed)
| extend Result= iff(ResultType ==0 ,"failure" ,"success" )
| summarize fail=countif(Result=="failure") , success=countif(Result=="success") by   ClientAppUsed

 

Resources