topic Re: Events return blank results in Splunk Search

Events return blank results

kalilinux0011 — Thu, 07 Nov 2019 03:25:07 GMT

I don't know what happened,pls look the picture and help me!

thanks very much

Re: Events return blank results

kamlesh_vaghela — Thu, 07 Nov 2019 05:48:26 GMT

@kalilinux0011

It would be great if you share some sample event and search to help you.

Re: Events return blank results

Anantha123 — Fri, 08 Nov 2019 19:09:15 GMT

Hi,
sorry cant understand Chinese. but can say that the results will be shown 3rd(Statistics) and 4th(Visualisation) tabs.
If you are in "Fast mode" , then you cannot see events . If you want to see the events you have to change to "Verbose Mode".

Hope this helps.

Thanks
Anantha.

Re: Events return blank results

kalilinux0011 — Sat, 09 Nov 2019 09:30:29 GMT

blank in "Verbose Mode",other mode is OK
so I can't see the raw data in Verbose Mode

Re: Events return blank results

danflannery — Fri, 21 Aug 2020 02:49:08 GMT

I am having the same issue. In Verbose mode, I am only able to see events under 1 App, which changes randomly. Running the same query under other apps shows the fields on left, but events are blank.

Been having this issue for over a year now and my local Splunk admins cannot seem to help. They think it's a rendering issue with my browser, but I've tried multiple browsers and it behaves the same way on my iPhone as well. Seems to be more of an account-level issue or permissions setting.

Re: Events return blank results

AzJimbo — Wed, 17 Nov 2021 19:18:58 GMT

this old problem bit me today. Go to 'All Fields' and deselect all fields, then close that window. Once that was settled, I was able to reselect the 'All Fields' option and the Event Viewer repopulated. Not sure why it worked, but it did and thought I'd share.

Re: Events return blank results

JyPl4wNYu7GV1uL — Mon, 26 Feb 2024 21:41:16 GMT

I know this is ancient, but I had the same issue with blank results because of this:
https://community.splunk.com/t5/Splunk-Search/What-would-intermittently-cause-less-events-to-return-the-raw/m-p/490525