sghaskell / maps-plus

Maps+ for Splunk
Other
18 stars 3 forks source link

Maps+ stalls/hung-up when enabling Playback #40

Closed PMJeffery closed 1 year ago

PMJeffery commented 1 year ago

When enabling the Playback function, the loading animation spins forever and never recovers.

Sample SPL:

index=crimes
| reverse
| eval description = "_time, crime_type", tooltip = description
| table _time, latitude, longitude, description, tooltip

I can enable the pathlines and it works, but enabling playback shows "Dec. 31, 1969" in the bottom left.

I got this to work with GPS data from Waze indexed into Splunk, but similar SPL and same format settings causes the hang-up.

PMJeffery commented 1 year ago

You can find me internally at Splunk, mjeffery

PMJeffery commented 1 year ago

Problem solved w/ @sghaskell

The source of the browser "crash" is due to the long distance between each time event and the default values for Tick Length and Playback Speed. In my case, it was 1 or 2 events per day. To properly configure it: Format>Path Lines>

Tick Length - 3600000 Playback Speed - 100000

image

You may need to adjust the values based upon the time between events/timestamps for smoother playback.

sghaskell commented 1 year ago

These settings are not documented very well right now. I'll work to fix that. The problem here was that the fidelity of the points to plot was quite low and spread out over a large period of time. In order to animate properly, I set the Tick Length to 1 hour in milliseconds and bumped the playback speed up. This results in a quicker, choppy animation. It plays back like chess pieces moving.

For smoother playback, ensure the data set has higher fidelity over the time range. The default settings work well for most use cases with gps telemetry taken at smaller regular intervals.