I've got a summary based chart and have verified that the data points exist in Summary. Yet, my chart just drops off at some date. Is there a setting I am missing?
It appears that Splunk, by default, is unable to plot additional datapoints beyond around 950-1000. The solution would be to widen the span so I can get more plotting points in -- unless there is a way to configure it to plot additional points.
It appears that Splunk, by default, is unable to plot additional datapoints beyond around 950-1000. The solution would be to widen the span so I can get more plotting points in -- unless there is a way to configure it to plot additional points.
No response? I guess then there is no way to increase the number of plotting points per chart?
Interesting. So I took a set of numbers with no processing, performed a timechart span=15m against the data and was only able to plot 10 days worth of data despite the data going well beyond 10 days. What might be the limitation I am hitting? There is no error, just a failure to plot the chart past the 10th day --- which is incorrect.
Splunk, munge the ability to view the date markers all you want but don't truncate my chart.