All Apps and Add-ons

Custom Visualizations: How do you get the Examples working?

ksextonmacb
Path Finder

The only examples that are working for me pull from csv files. The examples that try to pull from splunk data all fail with the message "No Results Found" regardless of the time frame used.

I tried modifying the one I'm interested in (Sunburst Chart) in a few ways, but nothing worked. I tried to pull from data I know is there, but I'm not sure I'm doing it correctly. I replaced the search that was already there with a search that returns data in my splunk search app. I still get "no results found".

The tutorial just tells you to start from a working example and modify it slightly until it breaks, but it's already broken as far as I can tell.

0 Karma
1 Solution

ksextonmacb
Path Finder

First off, I found that the search it was using as the default (tstats count where index=_* by index sourcetype source) didn't return any data. I should have checked that before stating it was broken; it just expected something there that wasn't there.

After figuring that out, it turns out that I just didn't know how to set up the chart. The valueField and categoryFields tags in the second div need to match fields in your search in the first div. A few comments explaining that would have been great, but I suspect people more familiar with web development wouldn't need them.

alt text

View solution in original post

ksextonmacb
Path Finder

First off, I found that the search it was using as the default (tstats count where index=_* by index sourcetype source) didn't return any data. I should have checked that before stating it was broken; it just expected something there that wasn't there.

After figuring that out, it turns out that I just didn't know how to set up the chart. The valueField and categoryFields tags in the second div need to match fields in your search in the first div. A few comments explaining that would have been great, but I suspect people more familiar with web development wouldn't need them.

alt text

Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...