All Apps and Add-ons

Custom Visualizations: How do you get the Examples working?

ksextonmacb
Path Finder

The only examples that are working for me pull from csv files. The examples that try to pull from splunk data all fail with the message "No Results Found" regardless of the time frame used.

I tried modifying the one I'm interested in (Sunburst Chart) in a few ways, but nothing worked. I tried to pull from data I know is there, but I'm not sure I'm doing it correctly. I replaced the search that was already there with a search that returns data in my splunk search app. I still get "no results found".

The tutorial just tells you to start from a working example and modify it slightly until it breaks, but it's already broken as far as I can tell.

0 Karma
1 Solution

ksextonmacb
Path Finder

First off, I found that the search it was using as the default (tstats count where index=_* by index sourcetype source) didn't return any data. I should have checked that before stating it was broken; it just expected something there that wasn't there.

After figuring that out, it turns out that I just didn't know how to set up the chart. The valueField and categoryFields tags in the second div need to match fields in your search in the first div. A few comments explaining that would have been great, but I suspect people more familiar with web development wouldn't need them.

alt text

View solution in original post

ksextonmacb
Path Finder

First off, I found that the search it was using as the default (tstats count where index=_* by index sourcetype source) didn't return any data. I should have checked that before stating it was broken; it just expected something there that wasn't there.

After figuring that out, it turns out that I just didn't know how to set up the chart. The valueField and categoryFields tags in the second div need to match fields in your search in the first div. A few comments explaining that would have been great, but I suspect people more familiar with web development wouldn't need them.

alt text

Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...