https://community.splunk.com/t5/Splunk-Search/Why-is-the-mvcombine-breaking-sparkline/m-p/334491#M99408 <P>@subtrakt can you run the following query instead?</P> <PRE><CODE> | eval TEST1=TEST1."$" | stats values(TEST1) as TEST1 sparkline by url </CODE></PRE> Thu, 12 Apr 2018 20:35:48 GMT niketn 2018-04-12T20:35:48Z https://community.splunk.com/t5/Splunk-Search/Why-is-the-mvcombine-breaking-sparkline/m-p/334490#M99407 <P>Hi everyone,</P> <P>I have a requirement to use mvcombine after stats. </P> <P>When I use mvcombine the sparkline stops working and presents the sparkling number values instead of the line. Has anyone seen this before?</P> <P>Also If I put mvcombine before stats it kills the sparkling. I think it has something to do with the lookup prior that uses the url field</P> <PRE><CODE>| stats values(TEST1) as TEST1 sparkline by url | mvexpand TEST1 | eval TEST1=TEST1.”$” | mvcombine TEST1 </CODE></PRE> Thu, 12 Apr 2018 20:17:04 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-the-mvcombine-breaking-sparkline/m-p/334490#M99407 subtrakt 2018-04-12T20:17:04Z https://community.splunk.com/t5/Splunk-Search/Why-is-the-mvcombine-breaking-sparkline/m-p/334491#M99408 <P>@subtrakt can you run the following query instead?</P> <PRE><CODE> | eval TEST1=TEST1."$" | stats values(TEST1) as TEST1 sparkline by url </CODE></PRE> Thu, 12 Apr 2018 20:35:48 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-the-mvcombine-breaking-sparkline/m-p/334491#M99408 niketn 2018-04-12T20:35:48Z