Skip to main content

Issue with Pie Chart Configuration in Google SecOps Native Dashboards

  • March 19, 2025
  • 4 replies
  • 20 views
prashant_nakum
Forum|alt.badge.img+4

Hi everyone,

I am working on creating dashboards in Google SecOps Native Dashboards and encountered an issue while configuring a pie chart.

Here’s my query:

 

metadata.product_event_type="ABC" match: target.port outcome: $count=count_distinct(metadata.id) order: $count desc limit: 15

 

When I configure the pie chart, I set the Field of Data as target.port and Value of Data as count, but the visualization appears empty, as shown in the attached screenshot.

However, when I switch to a table chart with the same query, all the data is displayed correctly.

Why is this happening with the pie chart? Is there a solution or an alternative approach to achieve this?

Thanks,
Prashant Nakum

4 replies

_K_O
Forum|alt.badge.img+12
  • _K_OBronze 5
  • Bronze 5
  • March 19, 2025

Hi @prashant_nakum,

I think it may be a bug with initiating the pie chart but you should be able to work around it by changing the Field of Data to the total_count and then back again. 

As an example, I created a similar query to yours:

metadata.vendor_name = "Slack" match: metadata.product_event_type outcome: $total_count = count_distinct(metadata.product_event_type) order: $total_count desc

Table View:

Initial Pie chart view:

To work around this, first change the "Field of Data" to the total_count:

From there, change it back to your expected Field of data:

Hope this helps! I would recommend opening a support ticket with Google support for this issue. 

 

 

 

prashant_nakum
Forum|alt.badge.img+4

Hi @prashant_nakum,

I think it may be a bug with initiating the pie chart but you should be able to work around it by changing the Field of Data to the total_count and then back again. 

As an example, I created a similar query to yours:

metadata.vendor_name = "Slack" match: metadata.product_event_type outcome: $total_count = count_distinct(metadata.product_event_type) order: $total_count desc

Table View:

Initial Pie chart view:

To work around this, first change the "Field of Data" to the total_count:

From there, change it back to your expected Field of data:

Hope this helps! I would recommend opening a support ticket with Google support for this issue. 

 

 

 


Thanks for your quick response.

I tried following your suggested approach, but the pie chart is still not populating in my case.

If there are any other solutions or alternative approaches, I would greatly appreciate your suggestions.

Regards,
Prashant Nakum

_K_O
Forum|alt.badge.img+12
  • _K_OBronze 5
  • Bronze 5
  • March 20, 2025

Thanks for your quick response.

I tried following your suggested approach, but the pie chart is still not populating in my case.

If there are any other solutions or alternative approaches, I would greatly appreciate your suggestions.

Regards,
Prashant Nakum


I recommend testing out whether the other chart styles work and opening a case with the support team. 

    jstoner
    Staff
    Forum|alt.badge.img+22
    • jstoner
    • Staff
    • March 20, 2025

    To @_K_O point, the guidance provided around creating a pie chart is right on, the usual gotcha is the limit 50 so if you followed the above and are still having issues, I would open a case. In fact as I did a quick test on it, the initial rendering of the pie chart seemed to work but if I made changes to those drop downs, the pie chart disappeared, so definitely open a case on it.

      Terms & ConditionsCookie settingsAccessibility statement
      Privacy Policy Terms of Service Gen AI Policy Community Guidelines Cookie Settings

      © 2025 Google. All rights reserved.