Dashboards & Visualizations

Progress bar jumping

rlautman
Path Finder

In our Martini solution we have several dashboards which contain a few panels. I've noticed that in some of our dashboards the progress bar jumps up and down, for example the bar will load to 100% and then fall back down to 1%, then jump to around 13% then back down. I have tried changing the position of the JobProgressIndicator tag however this doesnt seem to help the issue. Has anyone encountered this issue elsewhere?

Jason
Motivator

Also, keep in mind they have 33 indexers behind this search head. Could this behavior be due to distributed search?

0 Karma

rlautman
Path Finder

I've posted my xml in the answers section

0 Karma

rlautman
Path Finder

Heres the full xml for the dashboard - we use html formatting and the standard table view. I've tried changing where I place the bar to no avail.

<view autoCancelInterval="90" isVisible="true" objectMode="SimpleDashboard" onunloadCancelJobs="true" refresh="-1" template="dashboard.html" stylesheet="dashboard.css">
  <label>KCI Metrics - T2R</label>
  <module name="AccountBar" layoutPanel="appHeader"/>
  <module name="AppBar" layoutPanel="navigationHeader"/>
  <module name="Message" layoutPanel="messaging">
    <param name="filter">*</param>
    <param name="clearOnJobDispatch">False</param>
    <param name="maxSize">1</param>
  </module>
  <module name="Message" layoutPanel="messaging">
    <param name="filter">splunk.search.job</param>
    <param name="clearOnJobDispatch">True</param>
    <param name="maxSize">1</param>
  </module>
  <module name="SideviewUtils" layoutPanel="viewHeader"/>


  <module name="Gimp" layoutPanel="panel_row1_col1">
    <module name="HTML">
      <param name="html"><![CDATA[
      <span class="server_header"><center><font size="6" face="Times New Roman" color="blue">KCI Metrics - T2R</font></center></span>
      ]]></param>
    </module>


    <module name="HiddenSearch" layoutPanel="panel_row2_col1_grp1" autoRun="True" group="KCI 0">      
      <param name="search">index="b2bapps" sourcetype="b2b_audit" earliest=-0d@d latest=now (("*TroubleReportPending*" OR "*TroubleReportRejected*") AND b2b_LText="Message sent to Trading Partner") OR ("*AddTroubleReport*" AND b2b_LText="Received request from Trading Partner") | eval Flag = if(b2b_LText=="Received request from Trading Partner","Request","Response") | eventstats count as ttl by Flag | fields _time,ReceivedDateTime,E2E_busTxnSeq,ttl,Flag | eval RequestReceived =strptime(ReceivedDateTime,"%Y-%m-%dT%H:%M:%S") | stats count(eval(((_time-RequestReceived)/60)&lt;30)) as KCI0_1 count(eval(((_time-RequestReceived)/60)&lt;60)) as KCI0_2 count(eval(((_time-RequestReceived)/60)&gt;60)) as KCI0_3 count(eval(Flag=="Request")) as RequestCount count(eval(Flag=="Response")) as ResponseCount by Flag | eval 95%=(KCI0_1/ResponseCount)*100 | eval 98%=(KCI0_2/ResponseCount)*100 | eval TargetMiss=(KCI0_3/ResponseCount)*100 | stats max(RequestCount) as Reqcount max(ResponseCount) as Total max(95%) as 95% max(98%) as 98%,max(TargetMiss) as TargetMiss|fillnull value=0  95%,98%,TargetMiss</param>

      <module name="JobProgressIndicator">

        <module name="HTML">
          <param name="html">
          <![CDATA[

          <center>


          <br>
          <table border="1" cellspacing="1" cellpadding="1" style="background-color:#0F6404;">
            <tr>

               <td align="center"  style="color:white;"><font size="4"> &nbsp;&nbsp;&nbsp;&nbsp; RequestCount &nbsp;&nbsp;&nbsp;&nbsp;</font>  </td>
           <td align="center"  style="color:white;"><font size="4"> &nbsp;&nbsp;&nbsp;&nbsp; Notifications Sent Today&nbsp;&nbsp;&nbsp;&nbsp;</font>  </td>
          <td align="center" title="Less Than 45 mins"  style="color:white;"><font size="4">&nbsp;&nbsp;&nbsp;&nbsp;  95%
    TARGET&nbsp;&nbsp;&nbsp;&nbsp;</font>  </td>
               <td align="center" title="Less Than 60 mins" style="color:white;"><font size="4"> &nbsp;&nbsp;&nbsp;&nbsp; 98% TARGET &nbsp;&nbsp;&nbsp;&nbsp; </font></td>
           <td align="center" title="Greater Than 60 mins"  style="color:white;"><font size="4">  &nbsp;&nbsp;&nbsp;&nbsp;TARGET Missed &nbsp;&nbsp;&nbsp;&nbsp; </font></td>

           </tr>
                <tr>

          <td align="center"align="center" style="background-color:#C3FCB4;color:#0F6404;"><font size="2">$results[0].Reqcount$</font></td>
          <td align="center"align="center" style="background-color:#C3FCB4;color:#0F6404;"><font size="2"><a href="vws_T2RKCI0MetricForTotalNotificationsSent">$results[0].Total$</a></font></td>
          <td align="center"  style="background-color:#C3FCB4;color:#0F6404;"><font size="2"><a href="vws_T2RKCI0MetricFor95PercentTarget">$results[0].95%$</a></font></td><td align="center"  style="background-color:#C3FCB4;color:#0F6404;"><font size="2"><a href="vws_T2RKCI0MetricFor98PercentTarget">$results[0].98%$</a></font></td><td align="center"  style="background-color:#C3FCB4;color:#0F6404;"><font size="2"><a  href="vws_T2RKCI0MetricForMissedTarget">$results[0].TargetMiss$</a></font></td>

          </tr>

      </table>

        </center>

          ]]></param>
        </module>

      </module>  
    </module>


    <module name="HiddenSearch" layoutPanel="panel_row3_col1_grp1" group="T2R Request/Response Count" autoRun="True">
      <param name="search">index="b2bapps" sourcetype="b2b_audit" earliest=-0d@d latest=now b2b_LText="*Trading Partner" |eval EventType=mvfilter(eventtype like "%TroubleReport" OR eventtype like "%TroubleReportClear") | eval RequestTag=mvfilter(eventtype LIKE "%Tag") | eval ResponseTag=mvfilter(eventtype like "%_Res")|lookup T2RRequestResponse_LookUp EventType OUTPUT RequestName| stats count(eval(RequestTag)) as RequestCount count(eval(ResponseTag)) as ResponseCount by RequestName
      </param>
      <param name="groupLabel">T2R Request/Response Count</param>
      <module name="ViewstateAdapter">
        <param name="suppressionList">
          <item>count</item>
          <item>drilldown</item>
          <item>displayRowNumbers</item>
        </param>
        <module name="HiddenFieldPicker">
          <param name="strictMode">True</param>
          <module name="JobProgressIndicator"/>
          <module name="Paginator">
            <param name="count">10</param>
            <param name="entityName">results</param>
            <module name="EnablePreview">
              <param name="enable">True</param>
              <param name="display">False</param>
              <module name="SimpleResultsTable">
                <param name="count">10</param>
                <param name="entityName">results</param>
                <param name="allowTransformedFieldSelect">True</param>
                <param name="displayRowNumbers">true</param>
                <module name="Gimp"/>
              </module>
              <module name="ViewRedirectorLink">
                <param name="viewTarget">flashtimeline</param>
              </module>
            </module>
          </module>
        </module>
      </module>
    </module>






    <module name="HiddenSearch" layoutPanel="panel_row4_col1_grp1" group="T2R TroubleReportStatus Count" autoRun="True">
      <param name="search">index="b2bapps" sourcetype="b2b_audit" earliest=-0d@d latest=now  b2b_LText="*Trading Partner" "*TroubleReportStatusUpdate*" |eval TroubleReportUpdateResponse=mvfilter(eventtype like "et_TroubleReportStatusUpdate") | lookup T2RRequestResponseUpdate_LookUp  TroubleReportUpdateResponse OUTPUT TroubleReportUpdateName | stats count(eval(TroubleReportUpdateResponse)) as Count by TroubleReportUpdateName

      </param>
      <param name="groupLabel">T2R TroubleReportStatus Count</param>
      <module name="ViewstateAdapter">
        <param name="suppressionList">
          <item>count</item>
          <item>drilldown</item>
          <item>displayRowNumbers</item>
        </param>
        <module name="HiddenFieldPicker">
          <param name="strictMode">True</param>
          <module name="JobProgressIndicator"/>
          <module name="Paginator">
            <param name="count">10</param>
            <param name="entityName">results</param>
            <module name="EnablePreview">
              <param name="enable">True</param>
              <param name="display">False</param>
              <module name="SimpleResultsTable">
                <param name="count">10</param>
                <param name="entityName">results</param>
                <param name="allowTransformedFieldSelect">True</param>
                <param name="displayRowNumbers">true</param>
                <module name="Gimp"/>
              </module>
              <module name="ViewRedirectorLink">
                <param name="viewTarget">flashtimeline</param>
              </module>
            </module>
          </module>
        </module>
      </module>
    </module>
    <module name="HTML" layoutPanel="panel_row5_col1_grp1">  
      <param name="html"><![CDATA[

         <table width="100%">
         <tr>
         <td><div style="text-align:left;"><a href="HomePage" style="text-decoration:none;"><h1>Back</h1></a></div></td>
         <td><div style="text-align:right;"><h3>For CP-wise KCI Count . Please <a href="vws_T2R_CPWise_Count" style="text-decoration:none;"> Clickhere </a></h3></div></td>
         </tr>
         </table>

      ]]></param>
    </module>
  </module> 
</view>
0 Karma

rlautman
Path Finder

Actually the first JobProgressIndicator is the only one that seems to work correctly. In other examples of our dashboards that have loading bars, I've noticed that those searches which are displayed using a html template load correctly, like the first search. We are also using distributed search.

0 Karma

sideview
SplunkTrust
SplunkTrust

I spent some time trying to reproduce using searches that shared characteristics with that first search of yours but I was unable to. Also the last time I heard about this on a customer's system it was an unsolved mystery too. Are you running distributed search? Are you able to narrow down any commonalities about the searches where the progress runs "backward"?

0 Karma

sideview
SplunkTrust
SplunkTrust

Is it just the first JobProgressIndicator that's giving you the problems? I notice that a significant amount of this XML is a bit vestigial. I can post a cleaned copy if you want, without all the parts that aren't doing anything.

0 Karma

sideview
SplunkTrust
SplunkTrust

can you post the XML? More just to rule out the XML hierarchy as a cause. I've seen this happen too, and in cases where it was unrelated to the XML hierarchy. Is the search running across multiple indexes or across multiple indexers?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

&#x1f342; Fall into November with a fresh lineup of Community Office Hours, Tech Talks, and Webinars we’ve ...

Transform your security operations with Splunk Enterprise Security

Hi Splunk Community, Splunk Platform has set a great foundation for your security operations. With the ...

Splunk Admins and App Developers | Earn a $35 gift card!

Splunk, in collaboration with ESG (Enterprise Strategy Group) by TechTarget, is excited to announce a ...