Splunk Search

charting.chart.nullvaluemode = gaps not working for Stacked Area charts

keerthana_k
Communicator

Hi

I have a timechart which plots a stacked area chart of multiple series. I want to omit the null values. I tried specifying charting.chart.nullvaluemode as gaps in my view.xml but it did not work. I cannot use usenull=f as I don't have a split-by field. Please suggest how I can achieve this behaviour with Stacked Area charts.

Thanks in Advance.

Tags (2)
0 Karma

theunf
Communicator

I also have a stacked panel , area with gaps and multi-series mode to No.

Upon start of the panel, when page loads, it show only a full filled interval of the graph showing only one series.

I need to wait until it loads all results, change dash to edit panel mode, change panel´s multi-series mode to Yes
and then change back panel´s multi-series mode to NO.

Now i can see all series on the chat.

That´s happening with IE and Chrome.

Any1 seeing this ?

0 Karma

keerthana_k
Communicator

Thanks for your response. However, this is not working. Any other ideas?

0 Karma

aholzer
Motivator

You could add a where clause after your charting to ignore nulls

... | where NOT isnull()

This should exclude all null values from the results of your chart

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...