I don't see any way to submit a feature request like via uservoice or something, so I'm hoping the folks at Splunk will see this.
Is there any plan to move from the flash chart module to html5 native canvas charting? I'm specifically interested because it seems like I've run into the limit on the number of rows of data the flash chart can handle. But I'm sure soon the folks with iPads will also want to be splunking data on the go. 🙂
This is a great request. You can submit enhancement requests through support, which will get them triaged and into our tracking system. Although it's also useful to see this here, so we can respond directly and see how many other people are interested in the feature as well. Feel free to submit your request through support, or I can submit it for you.
I'll do so as well. We're beginning to rollout iPads to all of our upper management as well. Having better support of non-flash users would be great.
The limit on number of series displayed in charts is configurable. By editing the view XML, you can change that limit (defaults to 250).
In the relevant chart node, add a 'charting.maxCount' option:
<chart> ... <option name="charting.data.count">1000</option> </chart>
In the relevant HiddenChartFormatter module, add:
<module name="HiddenChartFormatter"> <param name="charting.data.count">1000</param> ... </module>
Yeah, I"ve already seen that from the other question about it. (I'm not a fan of having to go build an xml report for every random splunk I'm doing that I want to see better chart of. Hence why that answer really doesn't impress me, and this question.)
We've heard the request loud and clear from customers large and small. While we can't make official forward looking statements in this forum be rest assured that using Splunk on an iPad is something that we do hope make possible in the future.
The answer we've all been waiting for is here.
Upgrade to 4.3 and you have HTML 5
You may have to edit some advanced XML if you have written them yourself or downloaded them in apps from splunkbase. Look for lines containing
<module name="FlashChart"> They force splunk to use flash and not HTML rendering. All good app developers should be releasing updates if this is necessary.