Trying out a simple dashboard. But Chart is not taking up selected columns, but showing up all the columns. e.g. in example below, though charting.data1.column mentions only 0 and 1, i was expecting to see PingLoss colummn chart vs time, but it shows up PingLoss and no_PingLoss both columns in the chart. What am I missing ?
<?xml version="1.0" encoding="utf-8"?>
<dashboard>
<label>Sample</label>
<row>
<chart>
<searchName>Example</searchName>
<searchString>* | stats count(eval(eventtype="pingloss")) as PingLoss, count(eval(eventtype="no_pingloss")) as NoPingLoss by _time</searchString>
<earliestTime>rt-30m</earliestTime>
<latestTime>rtnow</latestTime>
<option name="charting.data1">view</option>
<option name="charting.data1.table">@data</option>
<option name="charting.data1.columns">[0,1]</option>
<option name="charting.chart.data">@data1</option>
<option name="charting.chart">column</option>
</chart>
</row>
</dashboard>
Thanks
... View more