Splunk IT Service Intelligence

ITSI KPI Sparkline shows 0 value on right but KPI reports a value

ewan000
Path Finder

Hi,

I am seeing the following odd behaviour on one of my service KPIs.

flat sparkline

Both these KPIs essentially measure the same thing, but you can see the second seems to have a delay to the sparkline population.

It's not exactly a delay, as there appear to be zeros for the right part of the chart which are replaced by the real values as time progresses.

The kpi is setup with a 1min poll, 1 min aggregation and a 40 second monitoring lag. The Sparkline is showing the past 60min.

The data behind the search is populated by a 1min database poll and appears upto date if searched manually or viewed in the Thresholding tab.

What is causing this behaviour and how can it be fixed?

PS. It's difficult to tell, but it also appears that the last value on the sparkline doesn't correspond to the numeric value given. ie the tool tip (currently) reads 182 vs the given value of 185.

PPS. Now I think about it even the top graph is odd in that It appears to drop to zero for the rightmost value. This appears to be the same for all my KPI sparklines

sallyanntracy
Explorer

Hi Ewan, i'm having the same issue. Did you ever find anything out?
Thanks -- Sally

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...