Hi! This looks still the same no visualisation. I found a workaround but it's not yet visible here. Regards, Hannu ... View more

Hi! I changed the file to json format and split it so that one file contains only measurements done in one time value (vs earlier several measurements in one file which was split to separated measurement events in sourcetype). Now I'm able to draw a graph using search command: source="Measurement_meminfo_20160225_132246_264_v2.json" host="ourdsplunk60.emea.nsn-net.net" sourcetype="_json" | rename Measurement{}.Time as mtime | stats last(Measurement{}.lcp0_shp) max(Measurement{}.lcp0_ahp0) max(Measurement{}.lsp0_k2a) max(Measurement{}.lsp0_k2c) max(Measurement{}.lsp0_axm0) max(Measurement{}.lsp0_k2b) by mtime Maybe we need still improve the json file but anyway this is already working. Thanks for your help! Regards, Hannu ... View more

Hi! Yes I did but same result. Regards, Hannu ... View more

Hi! I suppose that my problem is that those measurements are not connected to _time which I have tried to use. I suppose I should use Time event and somehow combine measurements to measurement Time to be able to draw a graph. Do you have any proposal how to do it? Regards, Hannu ... View more

Hi! Unfortunately neither this didn't solve my problem. Regards, Hannu ... View more

Hi! Thanks for your answers. I tried the convert auto option as well but unfortunately it didn't help. ... View more

Hi! sourcetype=DCM_MEAS_XML | chart _time Measurement.lcp0_shp gave me an error message 🙂 but your gentimes search gave exactly same result than for you. sourcetype=DCM_MEAS_XML | chart values(Measurement.lcp0_shp) by _time search didn't give any visualization for me. Please see the attachment. ... View more

Hi! Surprisingly it works now without any changes. I was not able to include all the source code with all the 6 inputs and 20 panels. The source code was cot correctly interpreted to the preview pane and was more or less unreadable. This is the code for the problematic panel only. <panel> <chart> <title>LTE site reset summary (CRT2/7)</title> <search> <query>index=rfs_* sourcetype=_json source=*CRT* source=*$ratselector$* $siteselector$ configid=$configselector$ $commentselector$ | rex field=source "(?i)RFSharing_LTE_(?<RunNumber>[^_]+)" | search RunNumber=reset | rex field=execution_comment "(?<RoType>^ROLR)" | search RoType=ROLR | rename "script_data.script_status" AS "Result" | rename "script_data.name" AS "Testcase" | eval NOK=case(Result == "False", "NOK") | eval OK=case(Result == "True", "OK") | stats count(Testcase) as "Nr of Runs" count(OK) as "OKs" count(NOK) as "NOKs"</query> <earliest>$field1.earliest$</earliest> <latest>$field1.latest$</latest> </search> <option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option> <option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option> <option name="charting.axisTitleX.visibility">visible</option> <option name="charting.axisTitleY.visibility">visible</option> <option name="charting.axisTitleY2.visibility">visible</option> <option name="charting.axisX.scale">linear</option> <option name="charting.axisY.scale">linear</option> <option name="charting.axisY2.enabled">false</option> <option name="charting.axisY2.scale">inherit</option> <option name="charting.chart">column</option> <option name="charting.chart.bubbleMaximumSize">50</option> <option name="charting.chart.bubbleMinimumSize">10</option> <option name="charting.chart.bubbleSizeBy">area</option> <option name="charting.chart.nullValueMode">gaps</option> <option name="charting.chart.sliceCollapsingThreshold">0.01</option> <option name="charting.chart.stackMode">default</option> <option name="charting.chart.style">shiny</option> <option name="charting.drilldown">all</option> <option name="charting.layout.splitSeries">0</option> <option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option> <option name="charting.legend.placement">right</option> <option name="charting.fieldColors">{"NOKs":0xFF0000,"OKs":0x00EC00}</option> <option name="charting.axisTitleY2.text">RFSharing_LTE_reset</option> </chart> </panel> Regards, Hannu ... View more

Thanks! I'm using Shared Time Picker similarly in all panels. ... View more