sendresults Sparkline Support

[xander517]

Hi all,
In experimenting with sendresults, I noticed that a sparkline is displayed as its raw text in both the Splunk results and the email sent to the designated recipients (formatted as "##_SPARKLINE##,10,1,64..." instead of as the typical green line).

Is anyone aware of sparkline support for sendresults or know a workaround?

Thanks,
AM

[mockd · Accepted solution]

Hi,

Thank you for trying out the sendresults command!

Sparklines are currently not supported as part of the emailed results. The command is expecting the data as passed to it to be already rendered as either a string or a number.

It would be an interesting feature to get working in a future version.

[rapmancz]

Hello, I am using sparklines values in email results, it was perfect like mentioned above - "##_SPARKLINE##,10,1,64..." , but after upgrade to Splunk 6.6, it changed to

"##_SPARKLINE##
10
1
64
..."

so each value is in one row, which is useless... Could it be reverted back to have all results in one line? This failure is for plain text and also html... 😞

[mockd]

Hi,

Thanks for raising the issue. I will look into what might have changed in 6.6 and get it corrected.