topic Re: Legend Truncates in Dashboards & Visualizations

Legend Truncates

Jamietriplet — Mon, 24 Jun 2024 14:14:11 GMT

How can i prevent truncation of the legend on a classic Splunk dashboard? The output has an ellipsis in the middle of my Legend, but i want to show the full text on the legend. See my query below:

index=$ss_name$_$nyName_tok$_ sourcetype=plt (Instrument="ZT2" OR Instrument="XY2" OR Instrument="P4")
| rex field=Instrument "(Calculated)\.(?<tag>.+)$$"
| timechart span=$span$ max(ValueEng) by tag

Thanks

Re: Legend Truncates

ITWhisperer — Fri, 21 Jun 2024 11:55:23 GMT

There is not much that can be done apart from placing the legend at the top or bottom of the chart. If you still get truncated names, then look to shorten them in your search.

Re: Legend Truncates

Jamietriplet — Fri, 21 Jun 2024 12:15:36 GMT

Hi @ITWhisperer , thanks for your reply. I can not shorten this as i need the full length of the legend. Also i have tried to move it to the top or bottom but i get same output. I want to actually set ellipsis to none, but i am not sure where to place this in search query

Thanks

Re: Legend Truncates

ITWhisperer — Fri, 21 Jun 2024 12:22:00 GMT

There are charting options you could try but with long legends this still may not be enough

charting.legend.labelStyle.overflowMode

(ellipsisEnd | ellipsisMiddle | ellipsisNone | ellipsisStart)

ellipsisMiddle

Determines how to display labels that overflow layout bounds by replacing elided text with an ellipsis (...).

ellipsisStart: Elides text at the start.

ellipsisMiddle: Elides text in the middle of the line.

ellipsisEnd: Elides text at the layout boundary.

ellipsisNone: Disables text truncation entirely.

Re: Legend Truncates

Jamietriplet — Mon, 24 Jun 2024 14:15:43 GMT

This would be helpful, but where do i place this in the below query?

index=$ss_name$_$nyName_tok$_ sourcetype=plt (Instrument="ZT2" OR Instrument="XY2" OR Instrument="P4")
| rex field=Instrument "(Calculated)\.(?<tag>.+)$$"
| timechart span=$span$ max(ValueEng) by tag

Re: Legend Truncates

Jamietriplet — Mon, 24 Jun 2024 14:15:10 GMT

@gcusello Please can you help?

How can i prevent truncation of the legend on a classic Splunk dashboard? The output has an ellipsis in the middle of my Legend, but i want to show the full text on the legend. See my query below:

index=$ss_name$_$nyName_tok$_ sourcetype=plt (Instrument="ZT2" OR Instrument="XY2" OR Instrument="P4")
| rex field=Instrument "(Calculated)\.(?<tag>.+)$$"
| timechart span=$span$ max(ValueEng) by tag

Thanks

Re: Legend Truncates

ITWhisperer — Sat, 22 Jun 2024 08:52:01 GMT

It doesn't go in the query. The legend is a feature of the viz. The charting option goes in the SimpleXML source.

https://docs.splunk.com/Documentation/Splunk/latest/Viz/ChartConfigurationReference

Re: Legend Truncates

Jamietriplet — Mon, 24 Jun 2024 08:23:15 GMT

Hello @ITWhisperer this worked. Thanks for your help

Re: Legend Truncates

Jamietriplet — Mon, 24 Jun 2024 08:24:48 GMT

hello @ITWhisperer This worked. Thanks for your help