Im trying to make a high level view dashboard that has multiple dashboards in it. I want to use the sparkline because it is a compact chart with a lot of information. My problem is that the sparkline shouldnt show any partial time buckets because then someone might look at the dashboard and think there is something wrong because of the dip at the end of the sparkline. From my understanding I cannot use partial=f in my query because i use stats is there any other way to achieve this? This is my query | stats sparkline(max(field7)) as "sparkline" max(field7) by field10 | rename field10 as "Environment" | rename max(field7) as "Response time max" | rex field="Response time max" mode=sed "s/(\.\d{2})\d*/\1/" ... View more