<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: no data in Cloudflare app dashboard in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/no-data-in-Cloudflare-app-dashboard/m-p/757333#M59353</link>
    <description>&lt;P&gt;Hi Livehybrid.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks a lot for your prompt response. I have reviewed both the queries, and I appreciate your effort. For the first query, I was able to see some data, which is great. However, for the second query, the count appears to be zero. I have attached the screenshots for your reference. Could you please help me understand what I might be missing here?&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/41194i24781F2A1E754B5A/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/41195i13B4DF53C27D2976/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;Looking forward to your insights.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Thu, 15 Jan 2026 01:54:15 GMT</pubDate>
    <dc:creator>nareshe</dc:creator>
    <dc:date>2026-01-15T01:54:15Z</dc:date>
    <item>
      <title>no data in Cloudflare app dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/no-data-in-Cloudflare-app-dashboard/m-p/757294#M59349</link>
      <description>&lt;P&gt;Hello Splunk team,&lt;/P&gt;&lt;P&gt;I hope this message finds you well. I am reaching out because I have installed the Cloudflare for Splunk app on our Splunk ES and have successfully configured Logpush to send logs from Cloudflare to Splunk, following the official instructions.&lt;/P&gt;&lt;P&gt;I have attached the index logs and Logpush job screenshots for your reference. Additionally, I have updated the macros after receiving the logs into Splunk. Despite these steps, the app dashboards are not functioning as expected.&lt;/P&gt;&lt;P&gt;Could someone please look into this issue and let us know what we might be missing? Your assistance would be greatly appreciated.&lt;/P&gt;&lt;P&gt;Thank you!&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/41174i26B3394DC29A0A5A/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/41175i8AD056EA50E6E080/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 14 Jan 2026 16:11:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/no-data-in-Cloudflare-app-dashboard/m-p/757294#M59349</guid>
      <dc:creator>nareshe</dc:creator>
      <dc:date>2026-01-14T16:11:10Z</dc:date>
    </item>
    <item>
      <title>Re: no data in Cloudflare app dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/no-data-in-Cloudflare-app-dashboard/m-p/757326#M59352</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/315150"&gt;@nareshe&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Please can you run the following to confirm the macros are correct:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;`cloudflare_index` `cloudflare_sourcetype`&lt;/LI-CODE&gt;&lt;P&gt;If you get data returned then can you also check:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| tstats count from datamodel=cloudflare.cloudflare&lt;/LI-CODE&gt;&lt;P&gt;If you get data from the datamodel then I would start looking at the searches in the dashboards where you're expecting data to be returned - can you click the magnifying glass to open the search and then check for anything which limits the data returned, remove bits of the search until you start to see data - let us know what you find and if there are specific searches which fail to return data.&lt;/P&gt;&lt;P&gt;&lt;span class="lia-unicode-emoji" title=":glowing_star:"&gt;🌟&lt;/span&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;Did this answer help you?&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;If so, please consider:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;Adding karma to show it was useful&lt;/LI&gt;&lt;LI&gt;Marking it as the solution if it resolved your issue&lt;/LI&gt;&lt;LI&gt;Commenting if you need any clarification&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Your feedback encourages the volunteers in this community to continue contributing&lt;/P&gt;</description>
      <pubDate>Wed, 14 Jan 2026 22:09:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/no-data-in-Cloudflare-app-dashboard/m-p/757326#M59352</guid>
      <dc:creator>livehybrid</dc:creator>
      <dc:date>2026-01-14T22:09:10Z</dc:date>
    </item>
    <item>
      <title>Re: no data in Cloudflare app dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/no-data-in-Cloudflare-app-dashboard/m-p/757333#M59353</link>
      <description>&lt;P&gt;Hi Livehybrid.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks a lot for your prompt response. I have reviewed both the queries, and I appreciate your effort. For the first query, I was able to see some data, which is great. However, for the second query, the count appears to be zero. I have attached the screenshots for your reference. Could you please help me understand what I might be missing here?&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/41194i24781F2A1E754B5A/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/41195i13B4DF53C27D2976/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;Looking forward to your insights.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 15 Jan 2026 01:54:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/no-data-in-Cloudflare-app-dashboard/m-p/757333#M59353</guid>
      <dc:creator>nareshe</dc:creator>
      <dc:date>2026-01-15T01:54:15Z</dc:date>
    </item>
  </channel>
</rss>

