topic Re: Pie charts revert to bar charts when copied. Why?? in Splunk Search

Pie charts revert to bar charts when copied. Why??

DTERM — Thu, 08 Sep 2011 19:49:14 GMT

I've created an application that has many charts, including bar charts and pie charts. When I copy the splunk/etc/apps/myapp folder to a search head, all my pie charts turn into bar charts. Why is that and how can that be fixed?

I know how to modify the objects and turn them back into PIE charts. However, my question is how to prevent that from happening in the first place. I can't roll out the application and then fix it afterwards. That is not an option.

Thanks,

Re: Pie charts revert to bar charts when copied. Why??

Ant1D — Mon, 12 Sep 2011 09:40:13 GMT

Maybe this is the case because your original searches/reports were saved via the report builder as bar charts and not pie charts.

Re: Pie charts revert to bar charts when copied. Why??

Ant1D — Mon, 12 Sep 2011 15:05:01 GMT

If these charts were running off a saved search then you will have to go to your local folder and look at savedsearch.conf. In here, the name of your search that is producing bar charts will have a vsid. You will then need to take this vsid and look at the viewstates.conf file. The matching vsid in this file should have an attribute called ChartTypeFormatter... = bar. You should change the word bar to pie. Maybe this will help

Re: Pie charts revert to bar charts when copied. Why??

DTERM — Fri, 16 Sep 2011 17:52:42 GMT

I've gone into the code and modified it to specify the specific chart type. That way, it does get copied over correctly.