Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5?

[apietersen]

Hi,

After upgrade to version Splunk Ent  version 8.2.5: All "single values" in all dashboards do not scale anymore relative to the height, showing max fontsize, not honouring the height of the panels. All dashboard suffering with this issue. Checked it on other Splunk instance and have the same issue. Already created a support-request.

Any suggestions in the meantime?

regards AshleyP

[apietersen]

Update:

-=-=-=-=-=-
It has been confirmed that it is a bug. 

"The fix has now been merged and will be available in the 8.2.6 release for you to be aware it is planned to be release on April within 4th to 10th."

-==-=-=-=-=-

[burwell]

Hello. I see that 8.2.6 was released today and the Fixed Issues section says this bug is fixed. I have not confirmed this.

https://docs.splunk.com/Documentation/Splunk/8.2.6/ReleaseNotes/Fixedissues

2022-02-15

SPL-218996, SPL-207039

Single Value Visualization on Dashboard displays smaller font

[apietersen]

Hi Burwell,

Thanks, Yes I have seen it and installed it on a test instance. Its looking good again.

[andreasz]

I also see the problem with Splunk's own dashboards.
Here an example from the monitoring console:
http://localhost:8000/en-US/app/splunk_monitoring_console/scheduler_activity_instance

They are using:
<option name="height">80px</option>

The text under the the numbers is hidden:

And here my test dashboard:

<dashboard>
  <label>SPL-219946</label>
  <row>
    <panel>
      <single>
        <search>
          <query>| makeresults count=1 | eval id = random()</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="height">50</option>
      </single>
    </panel>
  </row>
</dashboard>

Splunk Version 8.2.5

[andreasz]

BTW: I can reproduce the problem in version 8.2.4

All you have to do is to set version="1.1"

<dashboard version="1.1">

As desrcibed here

It seams to be related to the jQuery 3.5 update.

[apietersen]

Hi andreasz,

Thanks for the finding and Geez, what a pity that this was not previously known to support or was mentioned before in any tips or documentation.

[andreasz]

Hi apietersen,

thanks for the update regarding version 8.2.6!

Version 8.2.5. is a lot of fun 😞

This is what I get using TrackMe

And here using Metricator for NMON

Additionally some of my tables with custom JavaScript (SimpleXML BaseCellRenderer) aren't working anymore. Still looking for solution 😞

[apietersen]

Hi andreasz,

Wish you succes and a lot of fun L 😊
Dashboard Studio is/was promissing but is does not appears a full grown alternative to me yet.🙄

Nb. Will also look into your suggested links , although I am completely windows based 👍

[andreasz]

Hi apietersen,

I'm not a big fan of Dashboard Studio myself. Everything is so "clunky" and all the differences between the Cloud and On-Prem Version are simply frustrating.

We're trying to use the Splunk UI Toolkit , which gives you full freedom to implement Single Page Applications (SPA) using the React technology. But you need React Developers for that.

Regarding Trackme App:  you definitele have to check it out. It's propably one of the best apps in the Splunk Store and very usefull.

[apietersen]

Hi andreasz,

Thanks for the tips, again 🙂  I'll definitely look into it. I have no experience with Splunk Cloud yet, it is still on my to-do list. But would you say it offers a more user-friendly, efficient, powerful and integrated visualization environment?

[andreasz]

I'm using Splunk On-Prem. All I know is that the On-Prem Dashboard Studio Version is always behind the version in the Cloud.

[apietersen]

update:

I have build a new VM (windows10 + latest updates) with a fresh Splunk Ent 8.2.5 and did copy one of the effected dashboard to that new instance, this is the result:

mis-scaled single values: see screenshot

[apietersen]

not sure what you mean!?

AP

[apietersen]

Update, 

Nb, after a week finaly had a zoom meeting with Splunk support:

-=-==-=-=-=-=-=-=-

*** Zoom meeting details:3/15/2022 ***

-> Confirmed values are not scaling.

-> Confirmed customer is getting java errors.

-> Issue is impacting all dashboards

-> Customer wants a work around or solution.

-> Issue is that the single values (all single values) in dashboards are not honoring the height

-> Tried restarting the Splunk instance, it did not work.

-> After upgrade to 8.2.5 starting this behaviour.

Next Steps:

Since we have confirmed about getting also java errors and as per my previous findings it could be related, also by confirming this started after the upgrade and those dashboards were working normally with single values before, I will expose this case to senior engineers just to see if there is a possibility to be a bug which is what it looks like at the moment and hopefully we can get a fix for you.

-=-=-=-=-=-=-

[gjanders]

Did support happen to provide a jira for this?

I have the exact same issue and may need to also log a ticket 😞

Also version 8.2.5, single value scaling is the issue...

[apietersen]

Hi gjanders,

No reference to a Jira was mentioned to me.

This was the latest email answer reported back to me by support engineer:

-=-=-=-=-=-=-

I did expose this case to senior engineers and it looks like this issue could be related to a bug already adentify, however we need to validate this other possibility just by confirming a couple of simple questions: 

1. When you upgraded to the Splunk version 8.2.5, which was your previous version? 
2. Are these Custom dashboards you built?  or are this related to the below app? 

App: https://splunkbase.splunk.com/app/1603/

We just need to isolate the app part just to make sure 100% since if we are talking about custom dashboards then there is a workaround related to it since it will validate the bug issue, senior engineers confirmed there is an issue that, when you migrate or upgrade to this newer version, the dashboards  run into java scripts errors.

-=-=-=-=--=-=-=

In the mean time busy with re-designing the most relevant 100+ dashboards by replacing 'single-value ' panels for 'table' panels .

[burwell]

Thanks for reporting on this. It is so useful.

What version did you upgrade from where the issue was not there?

[apietersen]

Hi Burwell,

Version 8.2.4, as I try to follow all new versions when they are released. 

release notes were missing,

but googled it and found it some where else:

https://docs.splunk.com/Documentation/Splunk/8.2.5/ReleaseNotes/Fixedissues 

[apietersen]

Also new to me since upgrade to 8.2.5:

where can I find the Developer Console?

[burwell]

I believe they are referring to looking at Javascript errors

https://javascript.info/devtools