Splunk IT Service Intelligence

ITSI KPI Sparkline shows 0 value on right but KPI reports a value

Path Finder


I am seeing the following odd behaviour on one of my service KPIs.

flat sparkline

Both these KPIs essentially measure the same thing, but you can see the second seems to have a delay to the sparkline population.

It's not exactly a delay, as there appear to be zeros for the right part of the chart which are replaced by the real values as time progresses.

The kpi is setup with a 1min poll, 1 min aggregation and a 40 second monitoring lag. The Sparkline is showing the past 60min.

The data behind the search is populated by a 1min database poll and appears upto date if searched manually or viewed in the Thresholding tab.

What is causing this behaviour and how can it be fixed?

PS. It's difficult to tell, but it also appears that the last value on the sparkline doesn't correspond to the numeric value given. ie the tool tip (currently) reads 182 vs the given value of 185.

PPS. Now I think about it even the top graph is odd in that It appears to drop to zero for the rightmost value. This appears to be the same for all my KPI sparklines


Hi Ewan, i'm having the same issue. Did you ever find anything out?
Thanks -- Sally

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...