All Topics

Find Answers
Ask questions. Get answers. Find technical product solutions from passionate members of the Splunk community.

All Topics

Hi there, i'am quite new to Splunk, I read  a lot of documentation and examples of "How to search Splunk Cloud with Rest Api with Python3 and Requests" and none of those articles and examples didn't ... See more...
Hi there, i'am quite new to Splunk, I read  a lot of documentation and examples of "How to search Splunk Cloud with Rest Api with Python3 and Requests" and none of those articles and examples didn't help me. Actually I am able to authenticate, and I find way to write to Splunk (cloud), but searching and finding a correct port (try with 8088, 8089), all what I get for now is , or some big html file (which don't tell me anything) or 404 that requested URL was not found, actually I try to get "sid" in response !!!. So the main question is, how to search Splunk (cloud) using Python3  and Requests, and which are correct ports for those tasks. I am using Splunk Cloud Free Trial. Tnx in advance...
Our client would like to buy Splunk software to do data analysis and visualization. May i know does Splunk team provide technical service to install software in Microsoft VMWare and do database integ... See more...
Our client would like to buy Splunk software to do data analysis and visualization. May i know does Splunk team provide technical service to install software in Microsoft VMWare and do database integration?
I have the following question regarding using the sendemail command together with the 'map' one. Using the below search I managed to send the data to respective recipients based on the results, howe... See more...
I have the following question regarding using the sendemail command together with the 'map' one. Using the below search I managed to send the data to respective recipients based on the results, however, when there are no results no email is being sent.   | inputlookup 'email_addresses + name.csv' | map [search index=test_index | search name="$name$" | fields name title attributes | stats count(eval(case(attribute="A", 1))) as "Attribute A" count(eval(case(attribute="B", 1))) as "Attribure B" count by name title _time | eval _time=strftime(_time, "%+") | appendpipe [stats count | where count=0 ] | sendemail bcc="$email_address$" subject="Table $name$ | _time" sendresults=true inline=true format=table   lookup contains two columns: email_address and name I tried different scenarios but using for example makeresults, appendpipe to insert dummy data in case no results are returned, but all caused a duplication of the email being sent, where the second email is missing the tokenization specified in the sendemail command.
I have question.   Can anyone explain why same search query given different results in different time range? This is time range between 2021-02-24, hour 08:00:00 to 10:59:59   This is time r... See more...
I have question.   Can anyone explain why same search query given different results in different time range? This is time range between 2021-02-24, hour 08:00:00 to 10:59:59   This is time range between 2021-02-24, hour 09:00:00 to 09:59:59   Why the result on hour 09:00:00 different, one show 81 and the other one 387.   Thank you
Hi All,  We have 2 Splunk server. Splunk-Server-01 is a Search Head Splunk-Server-02 is install with DB Connect and able to retrieve data from SQL database.    Is it possible to use Splunk-Serve... See more...
Hi All,  We have 2 Splunk server. Splunk-Server-01 is a Search Head Splunk-Server-02 is install with DB Connect and able to retrieve data from SQL database.    Is it possible to use Splunk-Server-01 to get the DBConnect data in Splunk-Server-02 for lookup purposes? If yes, how we can achieve this? 
Hello Splunk team, I'm trying to append columns based in a search of a field (Network = Network_CIDR) in Ashland-Networks-EAs.csv , Network_CIDR is a variable, but I don't get any match, not sure why... See more...
Hello Splunk team, I'm trying to append columns based in a search of a field (Network = Network_CIDR) in Ashland-Networks-EAs.csv , Network_CIDR is a variable, but I don't get any match, not sure why. sourcetype=ib:ipam:network index=ib_ipam | eval Network_CIDR=address."/".cidr | search view = "Ashland" | eval utilization=round(utilization, 1) | eval allocation=round(allocation, 1) | sort address | rename timestamp as Timestamp, view as "Network View", address as Network, cidr as CIDR, utilization as "DHCPv4 Utilization %", address_total as Total, address_alloc as Allocated, address_reserved as Reserved, address_assigned as Assigned, protocol as Protocol, allocation as "Utilization %", address_unmanaged as Unmanaged | table Timestamp, "Network View", Network, CIDR, Total, Allocated, Reserved, Assigned, Protocol, "Utilization %", Unmanaged, Network_CIDR | appendcols [|inputlookup Ashland-Networks-EAs.csv where (Network = Network_CIDR) | table Site_ID_DDI, Region_DDI, Country_DDI, City_DDI, Comment] I have changed "where" option by "search" option in the appendcols part, but also is not matching any valuae and I get blank values in the columns added. sourcetype=ib:ipam:network index=ib_ipam | eval Network_CIDR=address."/".cidr | search view = "Ashland" | eval utilization=round(utilization, 1) | eval allocation=round(allocation, 1) | sort address | rename timestamp as Timestamp, view as "Network View", address as Network, cidr as CIDR, utilization as "DHCPv4 Utilization %", address_total as Total, address_alloc as Allocated, address_reserved as Reserved, address_assigned as Assigned, protocol as Protocol, allocation as "Utilization %", address_unmanaged as Unmanaged, Network_CIDR| table Timestamp, "Network View", Network, CIDR, Total, Allocated, Reserved, Assigned, Protocol, "Utilization %", Unmanaged, Network_CIDR | appendcols [|inputlookup Ashland-Networks-EAs.csv | search Network = Network_CIDR | rename Network as "Network/Mask" | table Network/Mask, Site_ID_DDI, Region_DDI, CountryDDI, City_DDI, Comment] Basically I want to add new cols from Ashland-Networks-EAs.csv at the end of each row that match with the Network field. If  I do the below search on Ashland-Networks-EAs.csv, I can get the info for 10.168.135.0/24. |inputlookup Ashland-Networks-EAs.csv |search Network = 10.168.135.0/24| fields Network, Site_ID_DDI, Region_DDI, Country_DDI, City_DDI   Maybe this is not the correct way to do what I want to do, but  Thanks in advance for your help.   Omar.
Given this search: | walklex index=web prefix=host what is the value contained in 'source'? source = web~22~F3E2588C-834C-4B2A-B12B-3845A69B5304 I thought this might be a bucket id but it doesn'... See more...
Given this search: | walklex index=web prefix=host what is the value contained in 'source'? source = web~22~F3E2588C-834C-4B2A-B12B-3845A69B5304 I thought this might be a bucket id but it doesn't seem to be. First bit is the index name--what's the rest of it? walklex documentation doesn't explain what is actually returned by this command, or how to use it. Charles
I have a splunk app which works fine in 7.x. We recently migrated it to 8.x and made minor python file changes to support python 3. Everything is working fine except app's setup configuration. It see... See more...
I have a splunk app which works fine in 7.x. We recently migrated it to 8.x and made minor python file changes to support python 3. Everything is working fine except app's setup configuration. It seems that configuration is never saved and it keeps redirecting to the start of configuration again. The same app configuration works just fine in 7.x After investigating further, I realized that one of the splunk templates, <splunk dir>/share/splunk/search_mrsparkle/templates/admin/edit.html has been updated in 8.x with additional check for safe redirect. --------------------------------------------------------- function handleEditFormSubmit(ev) { % if kwargs.get('redirect_override') and splunk.util.isRedirectSafe(kwargs['redirect_override']): window.location = ${ jsonify(make_url(kwargs['redirect_override'])) }; % else: var frm = $('#eaiform'); var eai = Splunk.EAI.getInstance(); if (!eai) return false; // page not yet loaded? // eai.confirmSubmission = true; // eai.confirmQuestion = _("Submitting this form will switch you to LDAP configuration, make sure you write down your failsafe login information or you won't be able to login."); eai.saveForm(frm); % endif return false; } --------------------------------------------------------- Due to this check, my app's configuration submission form has only following statement instead of actual form submission logic (which is in 'else' part of the above template) window.location = ${ jsonify(make_url(kwargs['redirect_override'])) }; Is someone else facing similar issue? I Is there any way to avoid having redirect_override which seems to be auto generated from Splunk?
Greetings, I would like to convert a large number to hex, just as described in this post. While the above poster's issue was resolved via printf("%X",<field>), this did not work for me with a 19 ... See more...
Greetings, I would like to convert a large number to hex, just as described in this post. While the above poster's issue was resolved via printf("%X",<field>), this did not work for me with a 19 digit uint64. . Run-anywhere example:   | makeresults | eval id="6932595798699158802" | eval want="6035872600D42D12" | eval dataHexUsingPrintf=printf("%X",id) | table id want dataHexUsingPrintf   I've tried several combinations of exact(), tostring(id, "hex"), and all attempts fail, it appears due to a lack of precision in the initial conversion to 'number' type. Example: | makeresults | eval id="6932595798699158802" | convert num(id) as id_num | eval want="6035872600D42D12" | eval dataHexUsingPrintf=printf("%X",id_num) Does Splunk support big num calculations of this type? Is there a work around I'm missing to properly convert to hex?  
I have 2 splunk indexes from which I need to gather data from, so I have a simple splunk search (that queries for different timers) which retuns the different timer names used in our service but one ... See more...
I have 2 splunk indexes from which I need to gather data from, so I have a simple splunk search (that queries for different timers) which retuns the different timer names used in our service but one of the indexes returns the same timer name with a trailing "_".  Eg: timerName=ABC.transaction_ How can I remove the trailing "_" from the timerName from the results obtained so that when I perform the stats command, it doesn't show the trailing "_"? Also, how can I merge the results from the 2 indexes into one? Any help is appreciated, thanks!
Hi, CentOS 8 will be EOL at the end of 2021, does AppD team have any plan to put the CentOS stream within supported OS in future roadmap? If yes, does it have any schedule can be exposed? ^ Edited ... See more...
Hi, CentOS 8 will be EOL at the end of 2021, does AppD team have any plan to put the CentOS stream within supported OS in future roadmap? If yes, does it have any schedule can be exposed? ^ Edited by @Ryan.Paredez for a clearer title.
Hi - is there a feature in appD that provides ability to export all existing health rules for an application to a "readable" report?  I've seen the ability to export rules data in json format however... See more...
Hi - is there a feature in appD that provides ability to export all existing health rules for an application to a "readable" report?  I've seen the ability to export rules data in json format however if I wanted to translate this to readable format it's an extra step and utility that I need to utilize to sift through the information.  Use-case is to provide/share a report to business partners on the current health rules in place and expose potential gaps in the flow map.  Thanks!
When implementing BRUM (via HTML/JS code injection into the code of an application) we can set configuration options for the apiKey, spa2, etc. However if there is a need to pass in additional meta ... See more...
When implementing BRUM (via HTML/JS code injection into the code of an application) we can set configuration options for the apiKey, spa2, etc. However if there is a need to pass in additional meta data, that could be retrieved when running a query: SELECT * FROM browser_records It isn't super clear from these docs ( https://docs.appdynamics.com/display/PRO21/Add+Custom+User+Data+to+a+Page+Browser+Snapshot ) what the correct data structure is: PS There are also a bunch of missing closing parens ")" in the "Conventional Ajax Requests" sample code. I think I've correctly understood that when sending data back, it needs to be organized into these buckets depending on the datatype we are trying to pass back in. Here's the updated code sample with the correct parens, and comments for each data "bucket". <script type="text/javascript" charset="UTF-8"> window['adrum-config'] = { xhr: { payloadParams: [{method: 'POST'}] }, userEventInfo: { "Ajax" : function(context){ if(context.data && context.data.indexOf("purchase") > -1){ // The URLSearchParams API does not work on IE/Edge var payload = new URLSearchParams(context.data); return { userData: { //String properties username: payload.get("username"), email: payload.get("email"), phone: payload.get("phone") }, userDataLong: { //Long properties customerId: Number(payload.get("customer_id")), totalPurchases: Number(payload.get("total_purchases")) }, userDataDouble: { //Double properties purchaseTotal: Number(payload.get("total")) }, userDataBoolean: { //Boolean properties discounted: Boolean(payload.get("discounted")), vipMember: Boolean(payload.get("member")) }, userDataDate: { //Date properties purchaseTime: Date.now() } } } } }; </script> <script src="//cdn.appdynamics.com/adrum/adrum-latest.js" type="text/javascript" charset="UTF-8"></script> Ok, so now for my particular case, all users are logged in (enterprise app), so we'd like to pass in 2 identifiers that let's us know which user, and which company a giving request is for. This will be particularly helpful with tracking down some users with rouge or broken browser extensions that are making various ajax requests while the user navigates our application. I'm looking to capture this additional property on Ajax, PageView, and VPageView. Does what I've coded below "smell" right? (ignoring all other aspects of the adrum-config) window['adrum-config'] = { userEventInfo: { "Ajax" : function(context){ return { userData: { user: sessionStorage.get("user"), cust: sessionStorage.get("company") } } }, "PageView" : function(context){ return { userData: { user: sessionStorage.get("user"), cust: sessionStorage.get("company") } } }, "VPageView" : function(context){ return { userData: { user: sessionStorage.get("user"), cust: sessionStorage.get("company") } } }, } }; ...or do I need to also specify all method verbs I want to track this on?... e.g. GET/POST/PUT/HEAD/...
I have search that looks something like that <<sarch string>>| chart sum(total) over AssingmentsByDay by PROBLEM_STATUS | addtotals This will group by AssingmentsByDay  and have columns by PROBLEM_... See more...
I have search that looks something like that <<sarch string>>| chart sum(total) over AssingmentsByDay by PROBLEM_STATUS | addtotals This will group by AssingmentsByDay  and have columns by PROBLEM_STATUS . The AssingmentsByDay is combination of AssignmentName and Day Here is an example how the results looks like  AssingmentByDay Restored To Be Worked Waiting Waiting - Client Waiting - IT Work In Progress Total 02/22/21-at 21 hrs->>>-Assingment1 1 1 1 2     5 02/22/21-at 21 hrs->>>-Assingment2 1           1 02/22/21-at 21 hrs->>>-Assingment3 1   1       2 02/23/21-at 21 hrs->>>-Assingment1 2     2     4 02/23/21-at 21 hrs->>>-Assingment2 2     2     4 02/23/21-at 21 hrs->>>-Assingment3 2     2     4   Now how can I change color of font or background of group of rows based on Assignments Day as shown above.  I really don't want to mix day with Assignment day, but I then not sure how to do get results similar to above.   I basically want to group them by day and also color them by each day Thank You
I am looking for help figuring out how to represent the following timestamp as a prefix for parsing time/start of events. this is contained in some logs i was provided today and am having difficulty ... See more...
I am looking for help figuring out how to represent the following timestamp as a prefix for parsing time/start of events. this is contained in some logs i was provided today and am having difficulty figuring out how to get pas the "o'clock" contained within the log files. these are new logs that were indexed under an existing sourcetype that already had a working/existing timestamp format. Old format: (majority of logs) [2021-02-23T14:37:26.659-07:00] New/abnormal format: (some weird new stuff)  <23-Feb-2021 2:21:41 o'clock PM MST> I am trying to figure out how best to capture the new format logs from the existing sourcetype and redirect them into the proper timestamp configuration or a new sourcetype of their own.
As the picture is suggesting, I cannot comprehend how the exception count number can be so different when I am looking at the summary page (the upper portion of my screenshot), and the exception ... See more...
As the picture is suggesting, I cannot comprehend how the exception count number can be so different when I am looking at the summary page (the upper portion of my screenshot), and the exception detail page (lower portion)? I removed some sensitive URL and node info from the picture but that's not relevant of course. So: - When I open the errors->exceptions page to find what are the exceptions with the biggest count number, I find that http error 500 appeared 1115 times in the last 2.5 hours. That's 9 exception per minute according to appdynamics, but when you divide 1115 over 150 (minutes) you get 7.43 - which should yield either 7 or 8 exceptions per minute, not 9. But I can live with that, we have something else here obviously, doesn't matter. Fine. - Then I open the details for http 500 exceptions to check it out, only to find that the controller is showing me three URLs with 1 exception, and one URL with 266 exceptions; that is 269 exceptions in total which is faaar awaay from 1115. Not fine at all. - Not only that, but when we look at the diagram on the same details page (see attached picture), we can see that indeed there were around 1.1k counts (roughly 532 times 2 = 1064, and plus few of other data point counts... you get 1115 just fine), but it is extremely different than 269!? I was not lazy and did the same math for other non-http exceptions and the summary page count was always giving the same result as the one on the diagram. Not only that, but when I analyzed other http errors (401 and 404) which were counted in single digits, the number always matched - unlike for the error 500. Anybody has any idea what is going on? This is an obvious difference and it gives me fear that in some cases appdynamics is not giving proper results - which is not acceptable for the premier monitoring solution after all. Please help!
Hello, I have 26 hosts reporting data to a specific index. These hosts are prone to malfunction at any time Is there a search I can do that will show me any dramatic increases in logging volume ... See more...
Hello, I have 26 hosts reporting data to a specific index. These hosts are prone to malfunction at any time Is there a search I can do that will show me any dramatic increases in logging volume from any of the hosts?   Thanks
  My Dashboard contains 4 inputs :  Time , 2 Drop Downs ( One Static whose value changes Second Dynamic Drop Down query ) & lastly a free text input. I am trying to default by  Dynamic Drop Down to... See more...
  My Dashboard contains 4 inputs :  Time , 2 Drop Downs ( One Static whose value changes Second Dynamic Drop Down query ) & lastly a free text input. I am trying to default by  Dynamic Drop Down to * (Shown as All to user) & free text input to *. I need to show or hide the Stats header &  the Count chart based on whether user enters text in text input field. ( Hide Stats when value is not * ).   I am having the below issues : 1. drop-down default value (*) in my Dynamic Drop Down is not appearing in my chart search .  selectFirstChoice field is appearing . However if I remove selectFirstChoice,  I see issues when I pick one value & then change stats drop down. 2. Chart gets hidden when I enter some text in text input , however when I remove the text , chart doesnt appear back unless I change the static drop down.  Below is my Dashboard source : <form> <label>My Dashboard</label> <fieldset autoRun="false" submitButton="true"> <input type="time" token="timeInput"> <label>Select a Time:</label> <default> <earliest>-7d@h</earliest> <latest>now</latest> </default> </input> <input type="dropdown" token="field1" searchWhenChanged="false"> <label>Select Publisher/Subcriber:</label> <choice value="pub">Publisher</choice> <choice value="sub">Subscriber</choice> <selectFirstChoice>true</selectFirstChoice> <change> <condition match="match(value,&quot;sub&quot;)"> <set token="ind">sub_core</set> <set token="intype">SubiName</set> <set token="infname">SubfName</set> <set token="infsize">SubfSize</set> <set token="hide_panel">true</set> </condition> <condition match="match(value,&quot;pub&quot;)"> <set token="ind">pub_core</set> <set token="intype">PubiName</set> <set token="infname">PubfName</set> <set token="infsize">PubfSize</set> <set token="hide_panel">true</set> </condition> </change> </input> <input type="dropdown" token="field2"> <label>Select Interface: (Optional)</label> <choice value="*">All</choice> <selectFirstChoice>true</selectFirstChoice> <fieldForLabel>interface</fieldForLabel> <fieldForValue>interface</fieldForValue> <search> <query>index=$ind$ service | rename $intype$ AS interface | stats count by interface</query> <earliest>-7d@h</earliest> <latest>now</latest> <preview> <condition> <set token="interface">$result.interface$</set> <set token="hide_panel">true</set> </condition> </preview> </search> </input> <input type="text" token="filename" searchWhenChanged="true"> <label>Provide a filename: (Optional)</label> <default>*</default> <change> <condition match="len($filename$) > 1"> <unset token="hide_panel"></unset> </condition> </change> </input> </fieldset> <row> <panel depends="$hide_panel$" id="title"> <title>Stats</title> </panel> </row> <row> <panel> <chart depends="$hide_panel$"> <title>File Count</title> <search> <query>index=$ind$ service $interface$ | dedup $infname$ | stats count($infsize$) by $intype$ | sort - count($infsize$) </query> <earliest>$timeInput.earliest$</earliest> <latest>$timeInput.latest$</latest> </search> <option name="charting.axisTitleY.visibility">collapsed</option> <option name="charting.axisTitleY2.visibility">visible</option> <option name="charting.chart">column</option> <option name="charting.drilldown">all</option> <option name="charting.legend.labelStyle.overflowMode">ellipsisEnd</option> <option name="charting.legend.placement">none</option> <option name="height">160</option> <option name="trellis.enabled">0</option> </chart> </panel> </row> </form>   Any help here is appreciated. 
Hi all, I have a Cisco 3750 Catalyst Switch and have a Universal Forwarder and Cisco Networks App installed on it. Also, there is SLA configured for logs but I'm unable to get data such as df, top, ... See more...
Hi all, I have a Cisco 3750 Catalyst Switch and have a Universal Forwarder and Cisco Networks App installed on it. Also, there is SLA configured for logs but I'm unable to get data such as df, top, memory consumed/free, bandwidth consumption. Below is attached the SLA in the Cisco switch;  Now, I would like to monitor; 1) Bandwidth consumed by the switch 2) df, CPU, etc utilities like any other Unix/Linux server. (attached screenshot below)   Is there a way to achieve these goals?   Thanks to anyone willing to help me.   Regards, Hisham  
Hi Everyone, I have one requirement  I have two panels one showing bar chart and one showing trend for the same first panel consists of operations like GET,PUT,POST ,DELETE AND second panel is sh... See more...
Hi Everyone, I have one requirement  I have two panels one showing bar chart and one showing trend for the same first panel consists of operations like GET,PUT,POST ,DELETE AND second panel is showing trend for this 4 operations.  My requirement is when I select GET in first panel it should highlight the trend of 2nd panel. Can someone guide me how can I achieve this Below is my code: <row> <panel> <chart> <title>NiFi_Operations</title> <search> <query>index=abc sourcetype=xyz source="user.log" $req$ $usr$| chart count(Request_Type) as "Request- Types" by Request_Type</query> <earliest>-15m</earliest> <latest>now</latest> </search> <option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option> <option name="charting.axisLabelsX.majorLabelStyle.rotation">-45</option> <option name="charting.axisTitleX.text">NiFi_Operations</option> <option name="charting.axisTitleX.visibility">visible</option> <option name="charting.axisTitleY.text">Count</option> <option name="charting.axisTitleY.visibility">visible</option> <option name="charting.axisTitleY2.visibility">visible</option> <option name="charting.axisX.scale">linear</option> <option name="charting.axisY.maximumNumber">999</option> <option name="charting.axisY.minimumNumber">0</option> <option name="charting.axisY.scale">linear</option> <option name="charting.axisY2.enabled">0</option> <option name="charting.axisY2.scale">inherit</option> <option name="charting.chart">bar</option> <option name="charting.chart.bubbleMaximumSize">50</option> <option name="charting.chart.bubbleMinimumSize">10</option> <option name="charting.chart.bubbleSizeBy">area</option> <option name="charting.chart.nullValueMode">gaps</option> <option name="charting.chart.showDataLabels">all</option> <option name="charting.chart.sliceCollapsingThreshold">0.00</option> <option name="charting.chart.stackMode">stacked</option> <option name="charting.chart.style">shiny</option> <option name="charting.drilldown">all</option> <option name="charting.layout.splitSeries">1</option> <option name="charting.layout.splitSeries.allowIndependentYRanges">0</option> <option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option> <option name="charting.legend.placement">right</option> <option name="height">300</option> <option name="refresh.display">progressbar</option> <option name="trellis.enabled">0</option> <drilldown> <set token="form.req">$click.value$</set> </drilldown> </chart> </panel> <panel> <chart> <title>NiFi_Operations Trend</title> <search> <query>index=abc sourcetype=xyz source="user.log" Request_Type="*" ADS_Id="*"| timechart count(Request_Type) as "Request- Types" by Request_Type</query> <earliest>$field1.earliest$</earliest> <latest>$field1.latest$</latest> <sampleRatio>1</sampleRatio> </search> <option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option> <option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option> <option name="charting.axisTitleX.visibility">visible</option> <option name="charting.axisTitleY.visibility">visible</option> <option name="charting.axisTitleY2.visibility">visible</option> <option name="charting.axisX.abbreviation">none</option> <option name="charting.axisX.scale">linear</option> <option name="charting.axisY.abbreviation">none</option> <option name="charting.axisY.scale">linear</option> <option name="charting.axisY2.abbreviation">none</option> <option name="charting.axisY2.enabled">0</option> <option name="charting.axisY2.scale">inherit</option> <option name="charting.chart">line</option> <option name="charting.chart.bubbleMaximumSize">50</option> <option name="charting.chart.bubbleMinimumSize">10</option> <option name="charting.chart.bubbleSizeBy">area</option> <option name="charting.chart.nullValueMode">gaps</option> <option name="charting.chart.showDataLabels">none</option> <option name="charting.chart.sliceCollapsingThreshold">0.01</option> <option name="charting.chart.stackMode">default</option> <option name="charting.chart.style">shiny</option> <option name="charting.drilldown">none</option> <option name="charting.layout.splitSeries">0</option> <option name="charting.layout.splitSeries.allowIndependentYRanges">0</option> <option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option> <option name="charting.legend.mode">standard</option> <option name="charting.legend.placement">right</option> <option name="charting.lineWidth">2</option> <option name="refresh.display">progressbar</option> <option name="trellis.enabled">0</option> <option name="trellis.scales.shared">1</option> <option name="trellis.size">medium</option> </chart> </panel> </row> Thanks in advance