Splunk Search

Why is the mvcombine breaking sparkline?

subtrakt
Contributor

Hi everyone,

I have a requirement to use mvcombine after stats.

When I use mvcombine the sparkline stops working and presents the sparkling number values instead of the line. Has anyone seen this before?

Also If I put mvcombine before stats it kills the sparkling. I think it has something to do with the lookup prior that uses the url field

| stats values(TEST1) as TEST1 sparkline by url
| mvexpand  TEST1 | eval TEST1=TEST1.”$” | mvcombine TEST1
Tags (3)
0 Karma

niketn
Legend

@subtrakt can you run the following query instead?

 | eval TEST1=TEST1."$"
 | stats values(TEST1) as TEST1 sparkline by url
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...