topic Re: One Dashboard panel is not showing any results in Splunk Search

One Dashboard panel is not showing any results

vjsplunk — Mon, 23 Sep 2024 04:41:38 GMT

One of my dashboard panel is not showing any results. But when I run the search manually it is giving results. Out of 8 panels only one panel is having the issue. I am not using base searches.

Re: One Dashboard panel is not showing any results

VatsalJagani — Mon, 23 Sep 2024 06:25:14 GMT

@vjsplunk- Is your Panel and Direct search using the same time-range??

Try increasing the time-range on the dashboard maybe!

Also, what happens when you open the panel in "Open in Search" from the bottom right of the panel? Do you see the results or no?

I hope this helps!!! Kindly upvote if it does!!!

Re: One Dashboard panel is not showing any results

vjsplunk — Mon, 23 Sep 2024 06:28:54 GMT

Yes. If I open the panel from "Open in Search" it is giving the results.

Re: One Dashboard panel is not showing any results

gcusello — Mon, 23 Sep 2024 06:29:27 GMT

Hi @vjsplunk ,

are you using a post process search?

if yes, you have to declare all the fields that you use in the panels, using fields.

Ciao.

Giuseppe

Re: One Dashboard panel is not showing any results

vjsplunk — Mon, 23 Sep 2024 06:35:02 GMT

Yes. If I open the panel from "Open in Search" it is giving the results.

Re: One Dashboard panel is not showing any results

VatsalJagani — Mon, 23 Sep 2024 06:35:36 GMT

@vjsplunk- If that is the case and you said you are not using base-searches then the only issue could be browser caching or cookie issue. Try incognito window.

Re: One Dashboard panel is not showing any results

ITWhisperer — Mon, 23 Sep 2024 07:42:37 GMT

OK so there is probably something different about the search which is not working - perhaps if you shared that with us we might be able to spot something, but at the moment this knowledge is unavailable to us.

Re: One Dashboard panel is not showing any results

vjsplunk — Mon, 23 Sep 2024 12:24:31 GMT

I am using an xyseries command after the filtering commands it is not giving any results.

Re: One Dashboard panel is not showing any results

gcusello — Mon, 23 Sep 2024 12:38:33 GMT

Hi @vjsplunk ,

could you share your code?

Ciao.

Giuseppe

Re: One Dashboard panel is not showing any results

vjsplunk — Mon, 23 Sep 2024 14:15:32 GMT

index="test" source="test2" "REPORT RequestId: "| eval Latency = rex(***)
|xyseries avg(Latency) as avg_Latency over _time by useragent

Re: One Dashboard panel is not showing any results

ITWhisperer — Mon, 23 Sep 2024 13:17:21 GMT

The xyseries command doesn't work like that

https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Xyseries

Try replacing it with the chart command

|chart avg(fusionapiLatency) as avg_fusionapiLatency over _time by useragent

Re: One Dashboard panel is not showing any results

vjsplunk — Mon, 23 Sep 2024 13:25:10 GMT

Chart also not giving the results

Re: One Dashboard panel is not showing any results

ITWhisperer — Mon, 23 Sep 2024 13:33:00 GMT

Please share some sample anonymised events in a code block so we can see what you are dealing with?

Re: One Dashboard panel is not showing any results

dural_yyz — Mon, 23 Sep 2024 14:09:18 GMT

Ugly and stupid but I've seen this before and didn't find a nice answer. Try this...

'initial search spl'
| fields *
'remainder of search as written'

Re: One Dashboard panel is not showing any results

vjsplunk — Mon, 23 Sep 2024 14:14:00 GMT

Found the issue. It was because I am not using null values before the transforming command

Re: One Dashboard panel is not showing any results

VatsalJagani — Mon, 23 Sep 2024 16:35:02 GMT

@vjsplunk- Glad you found solution to your problem. Please accept your own answer by clicking "Accept as Answer" so in future community users get benefited from this.

Community Moderator,

Vatsal Jagani