After upgrading to Splunk 6.3.2, why do some time range selections not work with some dashboard panels?

[Sr59]

Hi!

For example, Date Range selection for last 30 days works OK, but Preset last 30 days doesn't show any data in the panel, and again last month selection works OK. I have in the same dashboard several panels and only one panel is problematic.

Maybe Splunk 6.4.2 could solve this problem?

Kind Regards,
Hannu

[Sr59]

Hi!

Surprisingly it works now without any changes.
I was not able to include all the source code with all the 6 inputs and 20 panels. The source code was cot correctly interpreted to the preview pane and was more or less unreadable.

This is the code for the problematic panel only.

<panel>
  <chart>
    <title>LTE site reset summary (CRT2/7)</title>
    <search>
      <query>index=rfs_* sourcetype=_json source=*CRT* source=*$ratselector$* $siteselector$ configid=$configselector$ $commentselector$ | rex field=source "(?i)RFSharing_LTE_(?<RunNumber>[^_]+)" | search RunNumber=reset | rex field=execution_comment "(?<RoType>^ROLR)"  | search RoType=ROLR | rename "script_data.script_status" AS "Result" | rename "script_data.name" AS "Testcase" | eval NOK=case(Result == "False", "NOK") | eval OK=case(Result == "True", "OK") | stats count(Testcase) as "Nr of Runs" count(OK) as "OKs" count(NOK) as "NOKs"</query>
      <earliest>$field1.earliest$</earliest>
      <latest>$field1.latest$</latest>
    </search>
    <option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
    <option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
    <option name="charting.axisTitleX.visibility">visible</option>
    <option name="charting.axisTitleY.visibility">visible</option>
    <option name="charting.axisTitleY2.visibility">visible</option>
    <option name="charting.axisX.scale">linear</option>
    <option name="charting.axisY.scale">linear</option>
    <option name="charting.axisY2.enabled">false</option>
    <option name="charting.axisY2.scale">inherit</option>
    <option name="charting.chart">column</option>
    <option name="charting.chart.bubbleMaximumSize">50</option>
    <option name="charting.chart.bubbleMinimumSize">10</option>
    <option name="charting.chart.bubbleSizeBy">area</option>
    <option name="charting.chart.nullValueMode">gaps</option>
    <option name="charting.chart.sliceCollapsingThreshold">0.01</option>
    <option name="charting.chart.stackMode">default</option>
    <option name="charting.chart.style">shiny</option>
    <option name="charting.drilldown">all</option>
    <option name="charting.layout.splitSeries">0</option>
    <option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
    <option name="charting.legend.placement">right</option>
    <option name="charting.fieldColors">{"NOKs":0xFF0000,"OKs":0x00EC00}</option>
    <option name="charting.axisTitleY2.text">RFSharing_LTE_reset</option>
  </chart>
</panel>

Regards,
Hannu

[somesoni2]

Check if the time range token is used correctly for that panel (should be same as other working panels).

[Sr59]

Thanks! I'm using Shared Time Picker similarly in all panels.

[gyslainlatsa]

hi Sr59,
please post your xml code, i try to look the problem