Splunk Search

Pie charts revert to bar charts when copied. Why??

DTERM
Contributor

I've created an application that has many charts, including bar charts and pie charts. When I copy the splunk/etc/apps/myapp folder to a search head, all my pie charts turn into bar charts. Why is that and how can that be fixed?

I know how to modify the objects and turn them back into PIE charts. However, my question is how to prevent that from happening in the first place. I can't roll out the application and then fix it afterwards. That is not an option.

Thanks,

Tags (1)
0 Karma
1 Solution

DTERM
Contributor

I've gone into the code and modified it to specify the specific chart type. That way, it does get copied over correctly.

View solution in original post

0 Karma

DTERM
Contributor

I've gone into the code and modified it to specify the specific chart type. That way, it does get copied over correctly.

0 Karma

Ant1D
Motivator

If these charts were running off a saved search then you will have to go to your local folder and look at savedsearch.conf. In here, the name of your search that is producing bar charts will have a vsid. You will then need to take this vsid and look at the viewstates.conf file. The matching vsid in this file should have an attribute called ChartTypeFormatter... = bar. You should change the word bar to pie. Maybe this will help

0 Karma

Ant1D
Motivator

Maybe this is the case because your original searches/reports were saved via the report builder as bar charts and not pie charts.

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...