Ok...
No I haven't chosen not to disclose something... I was not intending to be vague, just keep the question simple. I was hoping someone might have seen these GENERAL symptoms before and could advise.
Its the opposite of what you said, the problem in this case is GENERALLY happening to every search that yields a nice table of results.
But to satisfy the curious here is some more detail:
Search String (made generic): source=mysource "A -> B" | rex "processing time(ns):(?[^d]+)ns" | chart values(proc_time) as "Processing Time" by _time
This WORKS but the chart has no data points, despite the statistics table being fully populated with values in two columns.
As does:
Search String (made generic): source=mysource "A -> B" | rex "processing time(ns):(?[^d]+)ns" | table _time proc_time
This produces a full table of data also, but again, the visualisation of that table yields a blank chart.
Other searches do the same. I get nice tables of data, but visualisations fail to render.
The same is true of ANY table I produce. So to restate my original (simple) question, are there any known (or other users seen similar) issues or traps that prevent a table being visualised? i.e. config issues, GUI bugs etc?
I have done this many times in the past, but it seems to not be working any more.
Thanks,
James
... View more