Splunk Search

Is it possible to set "connect mode" for null values in a chart overlay?

vaibhavagg2006
Communicator

I have a column chart with chart overlay. Can we set "connect mode" for null values in chart overlay lines?

Tags (3)
0 Karma

niketn
Legend

alt textIf you want to do it by the UI, first choose the Visualization as Line Chart and then select Null Values as Connect. Then change to any other chart that you want to use and use Chart Overlay.

Alternatively you can add the following to Dashboard in Simple XML:

<option name="charting.chart.nullValueMode">connect</option>

Updated answers I have attached screenshot of a Chart with Overlaid fields AvgOverall...

<option name="charting.chart.overlayFields">AvgOverall</option>

As you can see Based on Null Value Mode - Gaps, Connect and Zero, I can get different interpretation of series where ever data is not present or null.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

vaibhavagg2006
Communicator

This does not work for overlay chart. It only works for regular line chart.

0 Karma

niketn
Legend

@vaibhavagg2006 I have updated my answers and added a screenshot to show that nullValueMode is applicable to Overlaid fields also.

Please let me know if I have misunderstood your question in anyway. In case I have please add current Screenshot and if possible the expected behavior.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

chanst2
Path Finder

Just add this to that chart section in the XML source will do:
connect

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...