https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-the-Sparkline-looks-flat-sometimes/m-p/444157#M29252 <P>@robertlynch2020 </P> <P>Just added <CODE>_time</CODE> .</P> <P>Can you please try this?</P> <PRE><CODE>index=mlc_live | table host _time | chart sparkline count by host | fields - count </CODE></PRE> <P><CODE>_time</CODE> is required for sparkline. </P> <P><STRONG>Happy Splunking</STRONG></P> Wed, 01 May 2019 10:00:18 GMT kamlesh_vaghela 2019-05-01T10:00:18Z https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-the-Sparkline-looks-flat-sometimes/m-p/444156#M29251 <P>Hi</P> <P>I have a 15 minute real time search creating a sparkling and it looks great when it works.</P> <P>However often it looks like this, flat and i am not sure why.<BR /> <span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/7009i714DFA3639F2E5D0/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>I use this for the SPLUNK_HOME page so many user can log in. So i have created a savedsearch that is Real-Time</P> <PRE><CODE>| savedsearch HOME_LIVE_EVENTS_SPARKLINE (This is a 15 minute real time search) </CODE></PRE> <P>This is a </P> <PRE><CODE>index=mlc_live | table host | chart sparkline count by host | fields - count (This is a 15 minute real time search) </CODE></PRE> <P>Any ideas how to get it to work 100% of the time.</P> <P>Rob</P> Wed, 01 May 2019 09:54:14 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-the-Sparkline-looks-flat-sometimes/m-p/444156#M29251 robertlynch2020 2019-05-01T09:54:14Z https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-the-Sparkline-looks-flat-sometimes/m-p/444157#M29252 <P>@robertlynch2020 </P> <P>Just added <CODE>_time</CODE> .</P> <P>Can you please try this?</P> <PRE><CODE>index=mlc_live | table host _time | chart sparkline count by host | fields - count </CODE></PRE> <P><CODE>_time</CODE> is required for sparkline. </P> <P><STRONG>Happy Splunking</STRONG></P> Wed, 01 May 2019 10:00:18 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-the-Sparkline-looks-flat-sometimes/m-p/444157#M29252 kamlesh_vaghela 2019-05-01T10:00:18Z https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-the-Sparkline-looks-flat-sometimes/m-p/444158#M29253 <P>Perfect thanks <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Wed, 01 May 2019 10:22:48 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-the-Sparkline-looks-flat-sometimes/m-p/444158#M29253 robertlynch2020 2019-05-01T10:22:48Z https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-the-Sparkline-looks-flat-sometimes/m-p/444159#M29254 <P>Great @robertlynch2020 <BR /> Can you please upvote and accept this answer to close question?</P> Wed, 01 May 2019 10:34:45 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-the-Sparkline-looks-flat-sometimes/m-p/444159#M29254 kamlesh_vaghela 2019-05-01T10:34:45Z https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-the-Sparkline-looks-flat-sometimes/m-p/444160#M29255 <P>Sure - sorry and thanks very much</P> Wed, 01 May 2019 10:38:07 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-the-Sparkline-looks-flat-sometimes/m-p/444160#M29255 robertlynch2020 2019-05-01T10:38:07Z