https://community.splunk.com/t5/All-Apps-and-Add-ons/the-dashboard-of-cisco-ise-app-show-no-results-while-the-indexer/m-p/442331#M54366 <P>@jeremysun, if that solves it, kindly accept the answer so other will know this solution worked for you<BR /> thanks and happy splunking!</P> Fri, 20 Jul 2018 11:32:08 GMT adonio 2018-07-20T11:32:08Z https://community.splunk.com/t5/All-Apps-and-Add-ons/the-dashboard-of-cisco-ise-app-show-no-results-while-the-indexer/m-p/442328#M54363 <P>the dashboard of cisco ise app show no results while the indexer for cisco ise app has received log file from ise?</P> Wed, 18 Jul 2018 07:49:54 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/the-dashboard-of-cisco-ise-app-show-no-results-while-the-indexer/m-p/442328#M54363 jeremysun 2018-07-18T07:49:54Z https://community.splunk.com/t5/All-Apps-and-Add-ons/the-dashboard-of-cisco-ise-app-show-no-results-while-the-indexer/m-p/442329#M54364 <P>most of the times dashboards in pre-built apps do not conatais the <CODE>index = &lt;some_index&gt;</CODE> in the pre-built searches for panels reports etc<BR /> if your role does not search all indexes by default, it will see no data. try and open a random panel in search by clicking the magnifying glass icon on the bottom right of the panel, observe the search syntax, try and add <CODE>index = *</CODE> at the beginning of the search and see is there are results. if there are, either modify the searches or add the relevant index to be searched by default to the roles that are using the particular data set.</P> <P>hope it helps</P> Wed, 18 Jul 2018 16:16:42 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/the-dashboard-of-cisco-ise-app-show-no-results-while-the-indexer/m-p/442329#M54364 adonio 2018-07-18T16:16:42Z https://community.splunk.com/t5/All-Apps-and-Add-ons/the-dashboard-of-cisco-ise-app-show-no-results-while-the-indexer/m-p/442330#M54365 <P>Thanks for answering,</P> <P>I found that if i add the"index=cisco_ise" before the searching language,the result will show on the dashboard.</P> Fri, 20 Jul 2018 03:50:19 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/the-dashboard-of-cisco-ise-app-show-no-results-while-the-indexer/m-p/442330#M54365 jeremysun 2018-07-20T03:50:19Z https://community.splunk.com/t5/All-Apps-and-Add-ons/the-dashboard-of-cisco-ise-app-show-no-results-while-the-indexer/m-p/442331#M54366 <P>@jeremysun, if that solves it, kindly accept the answer so other will know this solution worked for you<BR /> thanks and happy splunking!</P> Fri, 20 Jul 2018 11:32:08 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/the-dashboard-of-cisco-ise-app-show-no-results-while-the-indexer/m-p/442331#M54366 adonio 2018-07-20T11:32:08Z https://community.splunk.com/t5/All-Apps-and-Add-ons/the-dashboard-of-cisco-ise-app-show-no-results-while-the-indexer/m-p/442332#M54367 <P>i've just started using the Cisco ISE app for the first time and I have all the syslog being indexed correctly into a unique index. I've updated each eventtype to include the index and the dashboards are now populating. Also, checked the TA under eventtype.conf will need to update each one with correct index</P> Mon, 28 Oct 2019 22:21:39 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/the-dashboard-of-cisco-ise-app-show-no-results-while-the-indexer/m-p/442332#M54367 ACingo17 2019-10-28T22:21:39Z