• About the eval command
• 1. http://docs.splunk.com/Documentation/Splunk/6.4.1/Search/Usetheevalcommandandfunctions
  2. http://docs.splunk.com/Documentation/Splunk/6.4.1/SearchReference/CommonEvalFunctions

• About dashboard options
• 1. http://docs.splunk.com/Documentation/Splunk/6.4.1/Viz/ChartConfigurationReference

If you want to display the values on the pie chart when viewing the search results in the visualization tab, you will need to construct the search statement to display the values after each value item.

(Search example)

index=_internal | top 5 component | eval percent=round(percent, 2) | eval component=component.", ".count.", ".percent."%"

The following options for displaying % values are available on the dashboard:

<option name="charting.chart.showPercent">1</option>

By adding this to the xml, it is possible to display the % value on the pie chart.

Note that this method only displays values up to the third decimal place, so if you want to change the number of digits displayed, use the eval command's round function, etc., to display the value as shown above.

that's all