All Apps and Add-ons

PVS App Data Not Appearing in Dashboard After Sending Data to Index Outside of Main

cgalligan
Explorer

The PVS app is setup and the detail is available when I do a search for "index=pvs", however the dashboards are currently blank. When I set up the Data Input, I elected to create a new index to store these results in lieu of storing in the main index. Is there a way to point the dashboard source to this index? Do the dashboards rely on the data being put into the main index?

0 Karma

mokuso
Explorer

The dashboards should not rely on a specific index. I'll attempt to try and reproduce and see if I have a similar result. Is any data returned when you search for "eventtype=pvs"?

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...