All Apps and Add-ons

Custom Visualizations: How do you get the Examples working?

ksextonmacb
Path Finder

The only examples that are working for me pull from csv files. The examples that try to pull from splunk data all fail with the message "No Results Found" regardless of the time frame used.

I tried modifying the one I'm interested in (Sunburst Chart) in a few ways, but nothing worked. I tried to pull from data I know is there, but I'm not sure I'm doing it correctly. I replaced the search that was already there with a search that returns data in my splunk search app. I still get "no results found".

The tutorial just tells you to start from a working example and modify it slightly until it breaks, but it's already broken as far as I can tell.

0 Karma
1 Solution

ksextonmacb
Path Finder

First off, I found that the search it was using as the default (tstats count where index=_* by index sourcetype source) didn't return any data. I should have checked that before stating it was broken; it just expected something there that wasn't there.

After figuring that out, it turns out that I just didn't know how to set up the chart. The valueField and categoryFields tags in the second div need to match fields in your search in the first div. A few comments explaining that would have been great, but I suspect people more familiar with web development wouldn't need them.

alt text

View solution in original post

ksextonmacb
Path Finder

First off, I found that the search it was using as the default (tstats count where index=_* by index sourcetype source) didn't return any data. I should have checked that before stating it was broken; it just expected something there that wasn't there.

After figuring that out, it turns out that I just didn't know how to set up the chart. The valueField and categoryFields tags in the second div need to match fields in your search in the first div. A few comments explaining that would have been great, but I suspect people more familiar with web development wouldn't need them.

alt text

Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI! Discover how Splunk’s agentic AI ...

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...