I am having a similar issue - sparkline bars are randomly on the floor or at the top, all showing the same value.
Doing some research, I've narrowed it down to the insertion of tokens connecting to the common time picker. If the earliest/latest xml tags are static values, it renders the bars as expected. If it's using time picker values, even with the exact time as specified in the static version of earliest/latest, the bars become unpredictable.
Here's an example, a simple 5-minute interval check of search head status. Sparkline is set to 5m bins, so bars are either going to be a 1 or 0. In both charts shown, each bar is a "1" but the chart TEST 1 (static time) renders consistent bars. The chart TEST 2 (using picker, set to same time) renders with some odd ones. It might be one weird sparkline, it might be all of them, very random. I have reversed the time source and the rendering inconsistency follows the shared time picker tokens.
Here is the XML behind the scenes:
<form refresh="60">
<label>SPARKLINE TEST</label>
<fieldset submitButton="false">
<input type="time" token="field1">
<label></label>
<default>
<earliest>-1h</earliest>
<latest>now</latest>
</default>
</input>
</fieldset>
<row>
<panel>
<title>TEST 1</title>
<table>
<search>
<query>index=capacity_metrics source=d:\\log\\sh_*_avail.log sh_pool="adhoc"
| stats count(status) as test_ct, count(eval(status="pass")) as pass_ct, sparkline(count(eval(status="pass")), 5m) as pass_trend by searchhead,target_url
| eval pass_pct=round((pass_ct/test_ct)*100,1)
| table searchhead, pass_trend,pass_pct,target_url</query>
<earliest>-60m</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<fields>["searchhead","pass_trend","pass_pct"]</fields>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">cell</option>
<option name="percentagesRow">false</option>
<format type="color" field="pass_pct">
<colorPalette type="list">[#D93F3C,#F7BC38,#65A637]</colorPalette>
<scale type="threshold">70,90</scale>
</format>
<format type="number" field="pass_pct">
<option name="precision">0</option>
<option name="unit">%</option>
</format>
<format field="pass_trend" type="sparkline">
<option name="type">bar</option>
<option name="height">20px</option>
<option name="colorMap">
<option name="0:69">#65A637</option>
<option name="70:89">#F7BC38</option>
<option name="70:89">#D93F3C</option>
</option>
</format>
<drilldown>
<eval token="url_token">replace($row.target_url$, "https://", ""</eval>
<link target="_blank">https://$url_token|n$</link>
</drilldown>
</table>
</panel>
<panel>
<title>TEST 2</title>
<table>
<search>
<query>index=capacity_metrics source=d:\\log\\sh_*_avail.log sh_pool="scheduled"
| stats count(status) as test_ct, count(eval(status="pass")) as pass_ct, sparkline(count(eval(status="pass")), 5m) as pass_trend by searchhead,target_url
| eval pass_pct=round((pass_ct/test_ct)*100,1)
| table searchhead, pass_trend,pass_pct,target_url</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<sampleRatio>1</sampleRatio>
</search>
<fields>["searchhead","pass_trend","pass_pct"]</fields>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">cell</option>
<option name="percentagesRow">false</option>
<format type="color" field="pass_pct">
<colorPalette type="list">[#D93F3C,#F7BC38,#65A637]</colorPalette>
<scale type="threshold">70,90</scale>
</format>
<format type="number" field="pass_pct">
<option name="precision">0</option>
<option name="unit">%</option>
</format>
<format field="pass_trend" type="sparkline">
<option name="type">bar</option>
<option name="height">20px</option>
<option name="colorMap">
<option name="0:69">#65A637</option>
<option name="70:89">#F7BC38</option>
<option name="70:89">#D93F3C</option>
</option>
</format>
<drilldown>
<eval token="url_token">replace($row.target_url$, "https://", ""</eval>
<link target="_blank">https://$url_token|n$</link>
</drilldown>
</table>
</panel>
</row>
</form>
Anyone else seeing this behavior? Any workaround to get good time picker results?
Thanks
... View more
