Splunk Search

charting.chart.nullvaluemode = gaps not working for Stacked Area charts

keerthana_k
Communicator

Hi

I have a timechart which plots a stacked area chart of multiple series. I want to omit the null values. I tried specifying charting.chart.nullvaluemode as gaps in my view.xml but it did not work. I cannot use usenull=f as I don't have a split-by field. Please suggest how I can achieve this behaviour with Stacked Area charts.

Thanks in Advance.

Tags (2)
0 Karma

theunf
Communicator

I also have a stacked panel , area with gaps and multi-series mode to No.

Upon start of the panel, when page loads, it show only a full filled interval of the graph showing only one series.

I need to wait until it loads all results, change dash to edit panel mode, change panel´s multi-series mode to Yes
and then change back panel´s multi-series mode to NO.

Now i can see all series on the chat.

That´s happening with IE and Chrome.

Any1 seeing this ?

0 Karma

keerthana_k
Communicator

Thanks for your response. However, this is not working. Any other ideas?

0 Karma

aholzer
Motivator

You could add a where clause after your charting to ignore nulls

... | where NOT isnull()

This should exclude all null values from the results of your chart

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...