Hi All, I'm pretty new to splunk. I was setting up my dashboard and tried to create a chart using the Top 5 Source Types saved search. It doesn't give an error or anything...just doesn't show anything. I've let it run for a day, to be on the safe side, but still nothing. When I click on View Results, it goes to the search and shows me the 5 source types, no problem. Here is the saved search:
index=_internal (source=/metrics.log OR source=\metrics.log) group=per_sourcetype_thruput | chart sum(kb) by series | sort -sum(kb) | head 5
Any suggestions?
Thanks!
Your question about Flash got me thinking. I was using Chrome...so I tried Firefox and that seemed to fix it. Sorry for the stupid question!
Thanks!
There is never a stupid question, glad you were able to fix it.
Just curious are you building a simple dashboard? If so did you try and select Data table from the panel style drop down instead of chart to see if you get results on that dashboard?
Next question are you able to see other flash charts in Splunk?
And what version of Splunk are you using?
Travis.
I believe it is just a simple dashboard. I did select Chart in the drop down, though. I am able to see other charts when I do a Search...I can see the bar graphs, for example.
This is version 4.1.6
Thanks!