All Apps and Add-ons

Custom Visualizations: How do you get the Examples working?

ksextonmacb
Path Finder

The only examples that are working for me pull from csv files. The examples that try to pull from splunk data all fail with the message "No Results Found" regardless of the time frame used.

I tried modifying the one I'm interested in (Sunburst Chart) in a few ways, but nothing worked. I tried to pull from data I know is there, but I'm not sure I'm doing it correctly. I replaced the search that was already there with a search that returns data in my splunk search app. I still get "no results found".

The tutorial just tells you to start from a working example and modify it slightly until it breaks, but it's already broken as far as I can tell.

0 Karma
1 Solution

ksextonmacb
Path Finder

First off, I found that the search it was using as the default (tstats count where index=_* by index sourcetype source) didn't return any data. I should have checked that before stating it was broken; it just expected something there that wasn't there.

After figuring that out, it turns out that I just didn't know how to set up the chart. The valueField and categoryFields tags in the second div need to match fields in your search in the first div. A few comments explaining that would have been great, but I suspect people more familiar with web development wouldn't need them.

alt text

View solution in original post

ksextonmacb
Path Finder

First off, I found that the search it was using as the default (tstats count where index=_* by index sourcetype source) didn't return any data. I should have checked that before stating it was broken; it just expected something there that wasn't there.

After figuring that out, it turns out that I just didn't know how to set up the chart. The valueField and categoryFields tags in the second div need to match fields in your search in the first div. A few comments explaining that would have been great, but I suspect people more familiar with web development wouldn't need them.

alt text

Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...