topic Re: index not working in Dashboards & Visualizations

index not working

Keerthi — Wed, 20 Dec 2023 11:06:52 GMT

Hi, i recently changes a SQL query in Splunk db connect to one of the dashboard. the query ran but i don't see the dashboard getting reflected to new data. as i was checking i see the index did not refresh after the new query is implemented. The last event of the index remians the day i changed the query. the new query had two new columns but i dont see it getting reflected. can anyone please help me with this. Its bit urgent !!!!!!!!!

Re: index not working

ITWhisperer — Wed, 20 Dec 2023 12:06:09 GMT

Try changing it back to how it was

Re: index not working

Keerthi — Wed, 20 Dec 2023 12:07:21 GMT

you mean the SQL query?

Re: index not working

ITWhisperer — Wed, 20 Dec 2023 12:08:52 GMT

If that's all you changed, then yes

Re: index not working

Keerthi — Wed, 20 Dec 2023 12:12:52 GMT

ok but i have new columns to be added. if i do so the index stops working. so the data is not forwarding to the indexing. is there nay option to run my index again?

Re: index not working

ITWhisperer — Wed, 20 Dec 2023 12:16:02 GMT

Please explain your full process as you haven't really provided sufficient information to determine what you are doing, what you changed, what your results were before the change, etc.

Re: index not working

Keerthi — Wed, 20 Dec 2023 12:20:53 GMT

so initially my source is a SQL based query. i had modified my query by adding 2 new columns. so i ran my source. the dashboard has 2 reports which is linked to index and source (sql query).Their events are showing 0 from past 6 days. i ran this command
|index=<index name> it shows 0 event.

Re: index not working

ITWhisperer — Wed, 20 Dec 2023 12:26:48 GMT

Please provide more details about how the index is updated.