Graylog2 / Graylog2/graylog2-server

Bar Chart behaves in unexpected and unintuitive ways when using limit

Open
#24,043 8 comments 0 reactions 0 assignees View on GitHub
feature triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

The Bar chart can be a super powerful aggregation, especially when using as a time based histogram, as shown below:

Image

However there are 2 bugs, one major, one minor:

1. The items shown, after being limited, are seemingly randomly selected and there is no way to sort them. This effectively makes the use of the bar chart not very useful. There is no way to sort the items when applying the limit but there needs to be.
2. The legend at the bottom does not obey the defined limit and shows more items than what the bar chart is showing.

See below for video demonstration of how this looks and behaves:

https://github.com/user-attachments/assets/b40485e3-4d92-42c5-aca5-467f580ea6d6

Please let me know if there are any questions! Always happy to meet to discuss further and provide live demonstrations.

## Expected Behavior

Bar chart with a limit applies allow using a sort to control what items are shown on the bar chart.

## Current Behavior

There is no way to control nor influence what the output of the bar chart looks like.

## Possible Solution

Allow the sort to apply AFTER the aggregation.

## Steps to Reproduce (for bugs)

1.
2.
3.
4.

## Context

## Your Environment

* Graylog Version: 6.3

## Checklist
[] This issue fix need to be backported.
[] Does this issue have **security** implications?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.