Closed XtremeOwnageDotCom closed 5 years ago
Taking the same search displayed in the dashboard, and opening the results in a search tab, goes back to showing all markers.
Seems to be something related to the visualization being located inside of a dashboard.
Is the search powering the visualization in the dashboard a post-process search?
In the example dashboard I created for diagnosing this issue- there is no-post process search.
Basically- I clicked the save as dashboard panel button from the search results to reproduce.
Other steps I have taken to diagnose:
Enabled / Disabled path lines - No change Enabled / Disabled Clustering - No Change Attempted with normal map tiles, and with bing tiles - no change.
What version of Splunk are you using? Can you export some sample data so I can try to reproduce what you're seeing? This viz definitely works in dashboards so it may be something specific to your dataset.
Sorry- I thought I posted a reply the other day- I cannot export the data due to its nature.
However- I do believe I have identified the issue, as some odd side-effect from Append....
Which still makes no sense, as the same number of results is returned either way.
That does appear to be the issue. The timing/how events were cutting off provided the selected duration is what made me point at the app.
After spending a few hours changing / touching stuff, I determined the appended search was somehow causing results to be chopped off chronologically, in the opposite order that would be expected.
Thanks for the update @ericmck2000 . Glad you got it all sorted!
Not quite sorted out- Its an odd issue I may have to open a case for them to review....... But, I am close to a work around.
It appears in certain cases, the map is not showing all of the nodes. I do not see an option to change the limit for the number of markers displayed.
To reproduce-
I have a dataset with around 2,000 latitudes, longs, descriptions, markers, etc. Fairly large data set.
Clustering is disabled, using canvas markers.
Using the visualization in a normal search, it worked exactly as intended and displayed all markers.
Upon saving to a dashboard, it began to truncate the results.
Here are the options the dashboard has stored.