Hi Trying to display some data with single value (and sparkline) with the single value viz. I want to break the result up over "countries", but nothing comes out. I get a sparkline, but the rest are all zero's | gentimes start=01/01/2024 end=01/31/2024 increment=1d | eval _time=starttime | eval countries="Sweden,Finland,Estonia,Lithuania,Norway,Latvia" | makemv delim="," countries | mvexpand countries | eval value=round(random() % 100, 0) | streamstats count | sort countries | timechart span=1d avg(value) by countries Dashboard  ... View more

Hi I have 2 graphs where the first graph feeds a token that populates the second graph. If nothing, in the first (left) graph is clicked, I have the right graph populated with all the values from the left graph. But, I can't find a way to unset the token by clicking in the white space in the left graph after having clicked a particular value. I'm guessing some should do the trick, but I can't get anything to play ball! <form> <label>License Galore</label> <init> <set token="index">*</set> </init> <description>all you ever wanted to know about license use</description> <fieldset autoRun="true" submitButton="false"> <input type="time" searchWhenChanged="true" token="time"> <label>Time picker</label> <default> <earliest>-7d@h</earliest> <latest>now</latest> </default> </input> </fieldset> <row> <panel> <title>Index size</title> <chart> <title>Index sizes over time</title> <search> <query>index=_internal source=*license_usage.log type=Usage | eval MB = b/1024/1024 | timechart span=1d useother=0 sum(MB) by idx | rename idx as Index, sum(MB) as Megabyte | sort – Megabyte</query> <earliest>$time.earliest$</earliest> <latest>$time.latest$</latest> <sampleRatio>1</sampleRatio> </search> <option name="charting.axisTitleX.text">Time</option> <option name="charting.axisTitleY.text">MB</option> <option name="charting.chart">area</option> <option name="charting.chart.showDataLabels">none</option> <option name="charting.chart.stackMode">stacked</option> <option name="charting.drilldown">all</option> <option name="charting.layout.splitSeries">0</option> <option name="refresh.display">progressbar</option> <drilldown> <set token="index">$click.name2$</set> </drilldown> </chart> </panel> <panel> <title>Sourcetype size</title> <chart id="detail" depends="$index$"> <title>Sourcetype detail for $index$ index</title> <search> <query>index=_internal source=*license_usage.log type=Usage idx=$index$ | eval MB = b/1024/1024 | timechart span=1d useother=0 sum(MB) by st | rename st as SourceType, sum(MB) as Megabyte | sort – Megabyte</query> <earliest>$time.earliest$</earliest> <latest>$time.latest$</latest> <sampleRatio>1</sampleRatio> </search> <option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option> <option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option> <option name="charting.axisTitleX.text">Time</option> <option name="charting.axisTitleX.visibility">visible</option> <option name="charting.axisTitleY.text">MB</option> <option name="charting.axisTitleY.visibility">visible</option> <option name="charting.axisTitleY2.visibility">visible</option> <option name="charting.axisX.scale">linear</option> <option name="charting.axisY.scale">linear</option> <option name="charting.axisY2.enabled">0</option> <option name="charting.axisY2.scale">inherit</option> <option name="charting.chart">area</option> <option name="charting.chart.nullValueMode">gaps</option> <option name="charting.chart.showDataLabels">none</option> <option name="charting.chart.sliceCollapsingThreshold">0.01</option> <option name="charting.chart.stackMode">stacked</option> <option name="charting.chart.style">shiny</option> <option name="charting.drilldown">none</option> <option name="charting.layout.splitSeries">0</option> <option name="charting.layout.splitSeries.allowIndependentYRanges">0</option> <option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option> <option name="charting.legend.mode">standard</option> <option name="charting.legend.placement">right</option> <option name="charting.lineWidth">2</option> <option name="refresh.display">progressbar</option> </chart> </panel> </row> </form> ... View more