topic Re: Why value 0 always align left? in Dashboards & Visualizations

Why value 0 always align left?

MirrorCraze — Mon, 18 Dec 2023 21:36:42 GMT

Every time I create a table visualization, I notice that the value 0 is always aligned on the left side while the rest is aligned on the right side. (322, 3483,0,0 is in the same column)

Is there any reason behind it and any way to fix this? Thanks!

Re: Why value 0 always align left?

bowesmana — Mon, 18 Dec 2023 23:17:23 GMT

What's the query and data that this comes from?

Re: Why value 0 always align left?

ITWhisperer — Tue, 19 Dec 2023 08:28:05 GMT

By default, strings are aligned left and numerics are aligned right - for some reason your 0 is a string. Please check your search, or post it with some sample data so we can investigate further.

Re: Why value 0 always align left?

MirrorCraze — Thu, 21 Dec 2023 05:45:48 GMT

Sure! Let me try to give partial of my data here.

{
host :host01
metrics:

{
     Started: true
     TotalConnectionCount: 0
     Uptime: 3 days 3 hours
     UptimeMillis: 271021770
}
}

My search query involving the field that have problem is something like this.

<search query> | spath output=metrics path=metrics | stats latest(metrics.Started) as started, latest(metrics.TotalConnectionCount) as connectionCount by host |eval state = if(started="true","UP","DOWN")
| table host, state, connectionCount

The problem comes with connectionCount. If it's not 0, it aligns right. If it's 0, it aligns left.

Ps. Actually after I investigate this, this problem does not occur on Splunk search, but on the Splunk Dashboard Studio when I use the table on my dashboard. Any ideas?

Re: Why value 0 always align left?

ITWhisperer — Thu, 21 Dec 2023 14:55:24 GMT

Dashboard Studio is still under development so some features which are available in SimpleXML / Classic dashboards are either not available or not fully working, it will depend on which version of Splunk you are using.