topic Re: Dashboard message "Search did not return any events" in All Apps and Add-ons

Why did search did not return any events?

mwestley — Mon, 19 Jun 2023 15:16:01 GMT

I'm working on a dashboard that is not returning any results but can find events upon clicking the "Open in Search" link. Why is it not showing results on the dashboard view?

Re: Dashboard message "Search did not return any events"

Vardhan — Fri, 19 Mar 2021 15:03:42 GMT

Hi @mwestley ,

The search is returning results when your time range is selected as All time. So Add a time range filter in the dashboard and check for the results.

Re: Dashboard message "Search did not return any events"

mwestley — Mon, 22 Mar 2021 15:29:15 GMT

I was hopeful trying your suggestion but after adding the time range picker still am getting no results. 😞 I am curious though on the Search results page where it shows statistics of 64 but events is zero. Why is that?

Re: Dashboard message "Search did not return any events"

mwestley — Mon, 22 Mar 2021 15:38:18 GMT

Re: Dashboard message "Search did not return any events"

Vardhan — Mon, 22 Mar 2021 17:23:18 GMT

Hi @mwestley ,

can you select the time range as the Previous year and check for the result?

And also after creating a time range input did you applied the time range on the search?

Re: Dashboard message "Search did not return any events"

ajones — Sun, 18 Jun 2023 04:54:04 GMT

Has this problem been figured out yet? I am having the same issue now and am unable to figure out what is going on. Thank you!

Re: Dashboard message "Search did not return any events"

ITWhisperer — Sun, 18 Jun 2023 05:40:22 GMT

Please share your dashboard source code in a code block </>

Re: Dashboard message "Search did not return any events"

ajones — Sun, 18 Jun 2023 06:11:14 GMT

<form theme="dark"> <label>[REDACTED]</label> <fieldset submitButton="false"> <input type="time" token="timerange" searchWhenChanged="true"> <label>Time Range</label> <default> <earliest>-2w@w</earliest> <latest>now</latest> </default> </input> </fieldset> <row> <panel> <title>[REDACTED]</title> <event> <title>[REDACTED]</title> <search> <query>| inputlookup [REDACTED].csv | bucket _time span=1week | addinfo | eval WeekA=strftime(info_min_time, "%V") | eval WeekB=strftime(info_max_time, "%V") | where [REDACTED] == [REDACTED] AND refwoy >= WeekA AND refwoy < WeekB | eval f_time=strftime(refdate, "%Y-%m-%d") | xyseries [REDACTED] f_time count | foreach * [| eval total=if(isnull(total),0,total) | eval total=total+1| eval DIFF=if(total=1, -1* '<<FIELD>>', DIFF + '<<FIELD>>')] | eval temp=split(DIFF,"http") | eval Difference=mvindex(temp,0) | fields - total, temp, DIFF</query> <earliest>$timerange.earliest$</earliest> <latest>$timerange.latest$</latest> </search> <option name="list.drilldown">none</option> <option name="refresh.display">progressbar</option> </event> </panel> <panel> <title>[REDACTED]</title> <event> <title>[REDACTED]</title> <search> <query>| inputlookup [REDACTED].csv | bucket _time span=1week | addinfo | eval WeekA=strftime(info_min_time, "%V") | eval WeekB=strftime(info_max_time, "%V") | where [REDACTED] == [REDACTED] AND refwoy >= WeekA AND refwoy < WeekB | eval f_time=strftime(refdate, "%Y-%m-%d") | xyseries [REDACTED] f_time count | foreach * [| eval total=if(isnull(total),0,total) | eval total=total+1| eval DIFF=if(total=1, -1* '<<FIELD>>', DIFF + '<<FIELD>>')] | eval temp=split(DIFF,"http") | eval Difference=mvindex(temp,0) | fields - total, temp, DIFF</query> <earliest>$timerange.earliest$</earliest> <latest>$timerange.latest$</latest> </search> <option name="list.drilldown">none</option> <option name="refresh.display">progressbar</option> </event> </panel> </row> </form>

Re: Dashboard message "Search did not return any events"

ajones — Sun, 18 Jun 2023 06:39:05 GMT

@ITWhisperer

I am very sorry and figured out what my issue was, the panel appeared to have switched to events instead of a statistics table! Thanks for reaching out to help!

Re: Dashboard message "Search did not return any events"

ITWhisperer — Sun, 18 Jun 2023 06:58:42 GMT

No worries @ajones - you were hijacking @mwestley post anyway. Glad you got your issue sorted out though.