topic Splunk 6 Advanced XML Charting Broken in Dashboards & Visualizations

Splunk 6 Advanced XML Charting Broken

Parameshwara — Wed, 02 Apr 2014 01:41:07 GMT

charting.axisLabelsY.majorUnit

charting.secondaryAxis.minimumNumber

charting.secondaryAxis.maximumNumber

These worked fine in Splunk 5 on advanced XML views, but stopped working in Splunk 6.

Re: Splunk 6 Advanced XML Charting Broken

Jason — Fri, 18 Apr 2014 15:06:55 GMT

Are you sure you were not using the advanced charting options, in Simple XML? (If your XML starts with <dashboard> or <form> you are using Simple XML.)

Flash (necessary for some advanced charting options) is no longer supported in simple XML dashboards.

To make an old dashboard work again in 6.x, I was able to go to [dashboard url]?showsource=1, select "Advanced XML view", copy and paste the advanced XML in the text box at the bottom into a new dashboard. Flash was then activated in this new dashboard.

Re: Splunk 6 Advanced XML Charting Broken

Parameshwara — Tue, 22 Apr 2014 06:59:34 GMT

It's in advanced XML.

Re: Splunk 6 Advanced XML Charting Broken

Parameshwara — Tue, 22 Apr 2014 07:14:33 GMT

Upgraded to Splunk 6.03, and it works now. I did not see this listed as a fix. I force my charts to be rendered using JSChart.

My code is:

<module name="HiddenSavedSearch">
     <param name="savedSearch">searchx</param>
     <module name="HiddenChartFormatter">
          <param name="charting.chart">line</param>
          <param name="legend.placement">top</param>
          <param name="charting.secondaryAxis.maximumNumber">1200</param>
          <param name="charting.axisLabelsY.majorUnit">600</param>
          <module name="JSChart">
               <param name="height">150px</param>
               <param name="width">100%</param>
               <param name="enableResize">False</param>
          </module> <!-- End JSChart -->
     </module> <!-- End HiddenChartFormatter -->
</module> <!-- End HiddenSavedSearch -->