Backfill not working for a realtime dashboard

[KarunK]

Hi All,

My realtime dashboard using Advanced xml (1hour window) is not doing the backfill.

The backfill in limits.conf is set to true

What else could prevent from dashboard doing the backfill ?

Thanks in Advance

Regards

KK

Update:

Hi All,

I am suspecting it be more of a sideviewutil problem? But not sure. The seraches seem to be very slow and the backfill wont work as soon as i introduce the pulldown module in sideviewutil.

Any thoughts ?

Thanks

KK

[sideview]

There is no need to use that hotfix previously provided by Sideview.

Instead you can just update to latest Sideview Utils because the relevant bug in the core Splunk UI was patched by Sideview Utils back in Sideview Utils 2.4.8.

The Release Notes item for it is Patched the Splunk.Search class to clear "status buckets" and "required field list" properties instead of leaking them down to drilldown searches.

http://sideviewapps.com/apps/sideview-utils/release-notes/

Also there is a mailing list now for Sideview Utils, so you can more easily stay on top of Sideview Utils releases.

http://sideviewapps.com/apps/sideview-utils/mailing-list/

[KarunK · Accepted solution]

Identified as bug in Sideview/Splunk Core Engine. Sideview is taking up the issue with Splunk.

Workaround provided by sideview is as below. And It worked.

*If you want a hotfix, making sure you're on the latest Sideview utils, open /appserver/modules/SideviewUtils.js around line 1190, you'll see code that looks like this:

    abandonJob: function($super) {
        this.setPostProcess(false);
        return $super();
    }
change it to this: 

    abandonJob: function($super) {
        this.setPostProcess(false);
        this._statusBuckets = 0;
        this._requiredFieldList = [];
        return $super();
    }*

[sideview]

Actually I added an alternate answer because there's really no need to use that hotfix. The problem was addressed in Sideview Utils 2.4.8 so just update to the latest version (2.4.9) http://sideviewapps.com/apps/sideview-utils