Dashboards & Visualizations

Could not add a custom visualization as "display.visualizations.custom.type" is missing in ui-prefs.conf.

reeta12345
New Member

Could not add a custom visualization as "display.visualizations.custom.type" is missing in ui-prefs.conf.

0 Karma

ssmoot_splunk
Splunk Employee
Splunk Employee

This condition is caused by overriding the directive for display.visualizations.type as defined in ui-prefs.conf
The default value for this parameter is charting, if you set it to an invalid visualization type, you will get this error.
If you get the error, you can still select a viz type by hitting the Select... in the upper left hand corner of the visualization, selecting a viz type will add a directive in ...etc/users/-/app/ui-prefs.conf

Here is the spec for the parameter:
display.visualizations.type = [charting|singlevalue]

If you are unsure how to find out if you have an invalid viz type, use btool:
splunk cmd btool ui-prefs list --debug | grep display.visualizations.type

In my repro of the error, I used custom as a type, here is my btool:

root@so1:/opt/splunk# ./bin/splunk cmd btool ui-prefs list --debug | grep display.visualizations.type
/opt/splunk/etc/system/default/ui-prefs.conf display.visualizations.type = charting
/opt/splunk/etc/system/default/ui-prefs.conf display.visualizations.type = charting
/opt/splunk/etc/system/local/ui-prefs.conf display.visualizations.type = custom

To resolve, simply comment out the offending stanza:

#display.visualizations.type = custom

niketn
Legend

@reeta12345 which stanza is throwing above error? Do you know which Custom Visualization is this for? Also which version of Splunk are you using?

Kindly add more information for the community to assist you better.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...