Dashboards & Visualizations

Visualization behaving differently in different apps

POR160893
Builder

Hi,

I have a timeline visualization as a panel for a dashboard. When I run the visualization as a standalone practice dashboard in the Search & Reporting app, it works as expected.

POR160893_0-1650929131102.png

 



However, when I run the EXACT same query with the same visualization fomat, it doe not show the top of the timeline as required:

POR160893_1-1650929178484.png

 

The query used in both dashboards is as follows:

<panel>
<viz type="event-timeline-viz.event-timeline-viz">
<search>
<query>index=fraud_glassbox sourcetype="gb:hit" SESSION_UUID="652a0e70-bfdf-11ec-9d96-005056bf9975"
| rename URL_PATH as label

| eval time_epoch = strptime('SESSION_TIMESTAMP', "%Y-%m-%d %H:%M:%S")
| convert ctime(time_epoch) as hour_minute timeformat="%Y-%m-%d %H:%M"
| strcat hour_minute ":" SEQUENCE combo_time
| rename combo_time as start


| eval tooltip = label
| table label, start,tooltip</query>
<earliest>-7d</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="drilldown">none</option>
<option name="event-timeline-viz.event-timeline-viz.backgroundColor">#ffffff</option>
<option name="event-timeline-viz.event-timeline-viz.eventColor">#d5ddf6</option>
<option name="event-timeline-viz.event-timeline-viz.maxZoom">3600000</option>
<option name="event-timeline-viz.event-timeline-viz.minZoom">60000</option>
<option name="event-timeline-viz.event-timeline-viz.orientation">top</option>
<option name="event-timeline-viz.event-timeline-viz.stack">true</option>
<option name="event-timeline-viz.event-timeline-viz.tokenAllVisible">tok_et_all_visible</option>
<option name="event-timeline-viz.event-timeline-viz.tokenData">tok_et_data</option>
<option name="event-timeline-viz.event-timeline-viz.tokenEnd">tok_et_end</option>
<option name="event-timeline-viz.event-timeline-viz.tokenLabel">tok_et_label</option>
<option name="event-timeline-viz.event-timeline-viz.tokenStart">tok_et_start</option>
<option name="event-timeline-viz.event-timeline-viz.tooltipDateFormat">DD-MMM-YYYY</option>
<option name="event-timeline-viz.event-timeline-viz.tooltipTimeFormat">h:mm:ss A</option>
<option name="height">346</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
</viz>
</panel>



What may be the reason for this?


Thanks,
Patrick

0 Karma

bowesmana
SplunkTrust
SplunkTrust

What version of app (1.71 is latest). Have you tried increasing height in the one that doesn't show the heading?

Other than that - don't know.

POR160893
Builder

How  would I increase the height?

0 Karma

bowesmana
SplunkTrust
SplunkTrust
<option name="height">346</option>
0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...