What capability gives users permissions to only enable/disable custom alert (w/o editing)? I looking for solution how to add a user just permissions to enabling or disabling custom alerts, w/o edit and schedule possibilities. ... View more

We are using Splunk Enterprise Ver.:8.2.3 and currently solving a Issue with displaying Line chart. The Use of the "search" and visualizing it into a line chart works properly with time range from 20:00 to 20:30 with span=1m but not with time range from 20:00 to 21:00 and span=1m time range 20:00-20:30   line charts looks ok with time range 20:00-20:30   in dashboard looks line chart ok as wellwith time range 20:00-20:30   but in this case with time range 20:00-21:00 in dashboard the line chart is incomplete, there is 13 mins a gap with 0  here you cans see 13mins gap and we don't know why, because we have events to display. events with time range 20:00-21:00 looks ok  The search is working properly here but not in dashboard. Can you explain me this weird behavior and where is the Issue please? Thank you in advance       ... View more