New comment on reddit

To make your search faster, do this:

index="suricata" sourcetype="suricata:alert" | stats count by category 

But as to the populating question … these two lines are your problem:

<fieldForLabel>column</fieldForLabel> <fieldForValue>column</fieldForValue> 

There is no field named "column" in your data

Change it to reference category instead of column:

<fieldForLabel>category</fieldForLabel> <fieldForValue>category</fieldForValue>