<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Why does my basic query work in search, but not in dashboard panel? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427767#M28198</link>
    <description>&lt;P&gt;@umdterps02, &lt;/P&gt;

&lt;P&gt;try out&lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;yoursearch | table *&lt;/CODE&gt;&lt;/P&gt;

&lt;P&gt;You chose the event view, you need the table command to display fields&lt;/P&gt;</description>
    <pubDate>Mon, 27 Aug 2018 18:59:31 GMT</pubDate>
    <dc:creator>horsefez</dc:creator>
    <dc:date>2018-08-27T18:59:31Z</dc:date>
    <item>
      <title>Why does my basic query work in search, but not in dashboard panel?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427765#M28196</link>
      <description>&lt;P&gt;When I run this basic query in search, I get results:&lt;BR /&gt;
&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/5647i5D8AD272257226D7/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;When I run the same exact query in a dashboard panel, I get no results:&lt;/P&gt;

&lt;P&gt;"Search did not return any events."&lt;/P&gt;

&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/5648i9F1A37C2B965B40C/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 27 Aug 2018 18:53:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427765#M28196</guid>
      <dc:creator>umdterps02</dc:creator>
      <dc:date>2018-08-27T18:53:33Z</dc:date>
    </item>
    <item>
      <title>Re: Why does my basic query work in search, but not in dashboard panel?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427766#M28197</link>
      <description>&lt;P&gt;Did you check the permissions of your lookup?&lt;/P&gt;</description>
      <pubDate>Mon, 27 Aug 2018 18:56:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427766#M28197</guid>
      <dc:creator>skoelpin</dc:creator>
      <dc:date>2018-08-27T18:56:22Z</dc:date>
    </item>
    <item>
      <title>Re: Why does my basic query work in search, but not in dashboard panel?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427767#M28198</link>
      <description>&lt;P&gt;@umdterps02, &lt;/P&gt;

&lt;P&gt;try out&lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;yoursearch | table *&lt;/CODE&gt;&lt;/P&gt;

&lt;P&gt;You chose the event view, you need the table command to display fields&lt;/P&gt;</description>
      <pubDate>Mon, 27 Aug 2018 18:59:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427767#M28198</guid>
      <dc:creator>horsefez</dc:creator>
      <dc:date>2018-08-27T18:59:31Z</dc:date>
    </item>
    <item>
      <title>Re: Why does my basic query work in search, but not in dashboard panel?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427768#M28199</link>
      <description>&lt;P&gt;Hi,&lt;BR /&gt;
Instead of fields * try adding the fields to search, filed extraction may not happening in dashboard since it runs search in smart mode by default.&lt;/P&gt;</description>
      <pubDate>Mon, 27 Aug 2018 19:03:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427768#M28199</guid>
      <dc:creator>pruthvikrishnap</dc:creator>
      <dc:date>2018-08-27T19:03:35Z</dc:date>
    </item>
    <item>
      <title>Re: Why does my basic query work in search, but not in dashboard panel?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427769#M28200</link>
      <description>&lt;P&gt;It works in search, but not panel.  I still get no results, I will have to check with admin for permissions. =(&lt;/P&gt;</description>
      <pubDate>Mon, 27 Aug 2018 19:36:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427769#M28200</guid>
      <dc:creator>umdterps02</dc:creator>
      <dc:date>2018-08-27T19:36:41Z</dc:date>
    </item>
    <item>
      <title>Re: Why does my basic query work in search, but not in dashboard panel?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427770#M28201</link>
      <description>&lt;P&gt;Are you running the search in the same app as the dashboard?&lt;/P&gt;</description>
      <pubDate>Mon, 27 Aug 2018 19:48:38 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427770#M28201</guid>
      <dc:creator>briancronrath</dc:creator>
      <dc:date>2018-08-27T19:48:38Z</dc:date>
    </item>
    <item>
      <title>Re: Why does my basic query work in search, but not in dashboard panel?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427771#M28202</link>
      <description>&lt;P&gt;You can easily check if its a permissions issue now. Go to Settings &amp;gt; Lookups and find your lookup table and identify what app it belongs to. Then go to your dashboard and verify its in the same app&lt;/P&gt;</description>
      <pubDate>Mon, 27 Aug 2018 19:49:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427771#M28202</guid>
      <dc:creator>skoelpin</dc:creator>
      <dc:date>2018-08-27T19:49:03Z</dc:date>
    </item>
    <item>
      <title>Re: Why does my basic query work in search, but not in dashboard panel?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427772#M28203</link>
      <description>&lt;P&gt;I figured out what the issue was, it appears that the CSV does not work with as an events table.  I changed the table to a statistics table and it worked!&lt;/P&gt;

&lt;P&gt;Thanks Everyone!&lt;/P&gt;

&lt;P&gt;&lt;span class="lia-unicode-emoji" title=":grinning_face_with_big_eyes:"&gt;😃&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 28 Aug 2018 18:21:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-does-my-basic-query-work-in-search-but-not-in-dashboard/m-p/427772#M28203</guid>
      <dc:creator>umdterps02</dc:creator>
      <dc:date>2018-08-28T18:21:24Z</dc:date>
    </item>
  </channel>
</rss>

