All Apps and Add-ons

Custom Visualizations: How do you get the Examples working?

ksextonmacb
Path Finder

The only examples that are working for me pull from csv files. The examples that try to pull from splunk data all fail with the message "No Results Found" regardless of the time frame used.

I tried modifying the one I'm interested in (Sunburst Chart) in a few ways, but nothing worked. I tried to pull from data I know is there, but I'm not sure I'm doing it correctly. I replaced the search that was already there with a search that returns data in my splunk search app. I still get "no results found".

The tutorial just tells you to start from a working example and modify it slightly until it breaks, but it's already broken as far as I can tell.

0 Karma
1 Solution

ksextonmacb
Path Finder

First off, I found that the search it was using as the default (tstats count where index=_* by index sourcetype source) didn't return any data. I should have checked that before stating it was broken; it just expected something there that wasn't there.

After figuring that out, it turns out that I just didn't know how to set up the chart. The valueField and categoryFields tags in the second div need to match fields in your search in the first div. A few comments explaining that would have been great, but I suspect people more familiar with web development wouldn't need them.

alt text

View solution in original post

ksextonmacb
Path Finder

First off, I found that the search it was using as the default (tstats count where index=_* by index sourcetype source) didn't return any data. I should have checked that before stating it was broken; it just expected something there that wasn't there.

After figuring that out, it turns out that I just didn't know how to set up the chart. The valueField and categoryFields tags in the second div need to match fields in your search in the first div. A few comments explaining that would have been great, but I suspect people more familiar with web development wouldn't need them.

alt text

Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...