All Apps and Add-ons

Splunk for Windows Infrastructure app -Dashboard issue

tkwaller
Builder

Hello

I installed and deployed the Splunk for Windows Infrastructure app some time ago and most of it works except the Performance Monitoring dashboard has no data. I can open the dashboard and run the searches(you have to go to the job inspector to actually see the searches) that are populating that dashboard and get results but there's still no data in the dashboard.

For example this search when I run it returns sparklines with results by host:
search eventtype="perfmon_windows" (Host="*") Host="*" object="Processor" counter="% User Time" instance="*" | stats sparkline(avg(Value)) as Trend avg(Value) as Average, max(Value) as Peak, latest(Value) as Current, latest(_time) as "Last Updated" by Host | convert ctime("Last Updated") | sort - Current | eval Average=round(Average, 2) | eval Peak=round(Peak, 2) | eval Current=round(Current, 2)

BUT this dashboard panel shows no data over the last 24 hours.(I would attach screenshots if I could)

What would be causing this?

Thanks

Todd Waller

0 Karma
1 Solution

tkwaller
Builder

This is actually a bug and has been reported to Splunk Support

View solution in original post

tkwaller
Builder

This is actually a bug and has been reported to Splunk Support

Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

REGISTER NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more ...

Security Highlights | November 2022 Newsletter

 November 2022 2022 Gartner Magic Quadrant for SIEM: Splunk Named a Leader for the 9th Year in a RowSplunk is ...

Platform Highlights | November 2022 Newsletter

 November 2022 Skill Up on Splunk with our New Builder Tech Talk SeriesCan you build it? Yes you can! *play ...