Dashboards & Visualizations

Area chart blank in stacked mode, but works fine in not stacked mode

hrecker
New Member

I'm having a strange issue with area chart. I have a search I've created an area chart for, which works fine, but when I edit the visualization to use either "stacked" or "stacked 100%" mode the whole chart disappears. This happens both in search and in the dashboard panel I made using the chart. If I return it to the default "not stacked" mode the chart comes back just fine.

I'm running splunk enterprise in a docker container right now, so I tried killing the container and starting a new one, and the issue went away. But I'd like to know if there is something that could typically cause this problem.

0 Karma

brschaefer_splu
Splunk Employee
Splunk Employee

Can you share your search? Generally this happens with tables that don't align to how Splunk expects the data.

0 Karma

hrecker
New Member

Here's the search, it seems pretty straightforward as far as I can tell. And I'm not sure why the chart would work in non-stacked mode with the exact same data.

sourcetype="statcsv" | rename "Add Ops" as Add, "Bind Ops" as Bind, "Compare Ops" as Compare, "Delete Ops" as Delete, "Modify Ops" as Modify, "Search Ops" as Search | table _time, Add, Bind, Compare, Delete, Modify, Search

0 Karma
Get Updates on the Splunk Community!

Monitoring Postgres with OpenTelemetry

Behind every business-critical application, you’ll find databases. These behind-the-scenes stores power ...

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

To start, if you're new to synthetic monitoring, I recommend exploring this synthetic monitoring overview. In ...

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk Edge Processor offers more efficient, flexible data transformation – helping you reduce noise, control ...