Hi,
I am trying to use Dashboard Studio to show transactions response times a Single Value with a Sparkline.
I have found that Single Value in Dashboard Studio seems to struggle when timechart search returns no value for a particular time interval.
For instance, if the end of my timechart query has a small 'span=....' value [1], Splunk Search shows me there are intervals where no aggregate response time is calculated [2] and I get a "missing property: majorValue" message in the Single Value Visualisation window/panel in Dashboard Studio.
If I have a large 'span=...' value, splunk search shows me ALL intervals do have an aggregate response time calculated and Dashboard Studio works as expected.
[1] | timechart span=10s P95(response_time_duration_mssec) as RT_P95
[2]
_time RT_P95
2023-01-03 10:59:50
940.000
2023-01-03 11:00:00
999.000
2023-01-03 11:00:10
946.000
2023-01-03 11:00:20
1164.500
2023-01-03 11:00:30
844.250
2023-01-03 11:00:40
2023-01-03 11:00:50
1108.500
2023-01-03 11:01:00
1290.200
2023-01-03 11:01:10
1555.000
(curtailed)
I'd rather not hardcode 'span=1min' into my dashboard as I have no way of guaranteeing this problem won't recur at times of low usage.
This seems like a bug in Dashboard Studio to me.
Please advise & TIA.
... View more