Hi Leonardo.
One way to aggregate the pie chart using multiple values would be using
Filters as Aggregation value. This will give you the option to configure search filters that will represent a slice in the chart.
So, to configure it you will need to:
1. Create a
Pie Visualization
2. In the
Metrics options select
Count for the
Aggregation field.
3. Add a
New Bucket with the
Split slices option.
4. Select
Filters for the
Aggregation Field.
5. Add as many filters as you need. For example, I tested it with
agent.id and
rule.level values:
- Filter 1:
agent.id:003 and rule.level: 5
- Filter 2:
agent.id:002 and rule.level: 5
You can add a
custom label for each filter using the tag icon (that is right next to the delete filter icon).
Here is an example of how it looks:
