topic Re: Debugging dashboard queries in Dashboards & Visualizations

Debugging dashboard queries

lassel — Tue, 19 May 2015 08:51:48 GMT

I am working on a dashboard with dynamic input fields.
It would be very useful to see the actual query that Splunk is running, based on my input fields.

Is it possible to display the query?

Re: Debugging dashboard queries

vganjare — Tue, 19 May 2015 08:57:57 GMT

You can check the actual query ran in Job Inspector. It is present in Search Properties under eventSearch

Re: Debugging dashboard queries

jeffland — Tue, 19 May 2015 08:58:07 GMT

One way to do it is go to Activity -> Jobs which will show you the recent searches.

Re: Debugging dashboard queries

Runals — Tue, 19 May 2015 11:01:33 GMT

Are you wanting to see the query dynamically within the dashboard for people using it OR are you asking more from a troubleshooting perspective? For troubleshooting what I tend to do is adjust my inputs in order to get the query to run and then click the magnifying glass in the lower left corner of the dashboard panel. That opens the query into another browser tab and allows me to see what Splunk is trying to run.

Re: Debugging dashboard queries

lassel — Tue, 19 May 2015 11:21:58 GMT

I like this answer too!