Hi,
I am trying to use Dashboard Studio to show transactions response times a Single Value with a Sparkline.
I have found that Single Value in Dashboard Studio seems to struggle when timechart search returns no value for a particular time interval.
For instance, if the end of my timechart query has a small 'span=....' value [1], Splunk Search shows me there are intervals where no aggregate response time is calculated [2] and I get a "missing property: majorValue" message in the Single Value Visualisation window/panel in Dashboard Studio.
If I have a large 'span=...' value, splunk search shows me ALL intervals do have an aggregate response time calculated and Dashboard Studio works as expected.
[1] | timechart span=10s P95(response_time_duration_mssec) as RT_P95
[2]
_time RT_P95
| 2023-01-03 10:59:50 |
940.000 |
| 2023-01-03 11:00:00 |
999.000 |
| 2023-01-03 11:00:10 |
946.000 |
| 2023-01-03 11:00:20 |
1164.500 |
| 2023-01-03 11:00:30 |
844.250 |
| 2023-01-03 11:00:40 |
|
| 2023-01-03 11:00:50 |
1108.500 |
| 2023-01-03 11:01:00 |
1290.200 |
| 2023-01-03 11:01:10 |
1555.000 |
(curtailed)
I'd rather not hardcode 'span=1min' into my dashboard as I have no way of guaranteeing this problem won't recur at times of low usage.
This seems like a bug in Dashboard Studio to me.
Please advise & TIA.
