Create a basic chart

In this example you compare the counts of user actions by calculating information about the actions customers have taken on the online store website.

  • The number of times each product is viewed
  • The number of times each product is added to the cart
  • The number of times each product is purchased

Prerequisite

This example requires the productName field from the Enabling field lookups section. You must complete all of those steps before continuing with this section. If you do not configure the field lookups, the searches will not produce the correct results.

Steps

  1. Start a new search.
  2. Set the time range to All time.
  3. Run the following search. 
    sourcetype=access_* status=200 | chart count AS views count(eval(action="addtocart")) AS addtocart count(eval(action="purchase")) AS purchases by productName | rename productName AS "Product Name", views AS "Views", addtocart AS "Adds to Cart", purchases AS "Purchases"

    This search uses the chart command to count the number of events that are action=purchase and action=addtocart. The search then uses the rename command to rename the fields that appear in the results.
    The chart command is a transforming command. The results of the search appear on the Statistics tab.
    This screen image shows the results of running the search in a table. There are 4 columns: Product Names, Views, Adds to Cart, and Purchases.

  4. Click the Visualization tab. The search results appear in a Pie chart.
  5. Change the display to a Column chart.
    This screen image shows the Visualization tab. The results of the search are formatted as a Column chart. The Product Names are on the X axis. The Views, Adds to Cart, and Purchases values for each product are displayed as columns in the chart.