Dashboards & Visualizations

All the single value panels in the table showing values not found but one panel shows zero in numerical with bar

marisstella
Explorer

Hi Everyone,

All the single value panels in the table showing as "values not found" but one panel shows "zero" in numerical with bar like if there is any value found it will show that number ex:123 .
I want to make sure, this particular panel also show as "values not found" to make all the panels are behaving similar.

0 Karma

woodcock
Esteemed Legend

Show us your XML.

0 Karma

niketn
Legend

@marisstella if you have count() aggregate function or fillnull in the single value query then 0s will be filled in the viz. You should change it to sum() aggregation or make sure no value is represented as NULL value in the tabular output instead of 0.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

maciep
Champion

that probably means the search for that panel actually produces a 0 as opposed to not finding any events. not a ton of info to go on here...but i would run that panel's search to see what it's doing.

There are also ways with splunk search to make "no results found" show something else, but i'm assuming you would know if something like that was set up in your dashboard.

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...