Dashboards & Visualizations

Chart not showing up

lmalhoit
Explorer

Hi All, I'm pretty new to splunk. I was setting up my dashboard and tried to create a chart using the Top 5 Source Types saved search. It doesn't give an error or anything...just doesn't show anything. I've let it run for a day, to be on the safe side, but still nothing. When I click on View Results, it goes to the search and shows me the 5 source types, no problem. Here is the saved search:

index=_internal (source=/metrics.log OR source=\metrics.log) group=per_sourcetype_thruput | chart sum(kb) by series | sort -sum(kb) | head 5

Any suggestions?

Thanks!

Tags (3)

lmalhoit
Explorer

Your question about Flash got me thinking. I was using Chrome...so I tried Firefox and that seemed to fix it. Sorry for the stupid question!

Thanks!

0 Karma

thall79
Communicator

There is never a stupid question, glad you were able to fix it.

0 Karma

thall79
Communicator

Just curious are you building a simple dashboard? If so did you try and select Data table from the panel style drop down instead of chart to see if you get results on that dashboard?

Next question are you able to see other flash charts in Splunk?

And what version of Splunk are you using?

Travis.

lmalhoit
Explorer

I believe it is just a simple dashboard. I did select Chart in the drop down, though. I am able to see other charts when I do a Search...I can see the bar graphs, for example.
This is version 4.1.6

Thanks!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Build and Launch AI Agents from Your Splunk Workflows

  Register We’ve all been there: juggling alerts, runbooks, and endless manual searches. What if you could ...

Splunk Cloud Application Management in Terraform

Register   On Tuesday, August 4 at 11AM PDT / 2PM EDT, we’re diving into how you can bring Infrastructure as ...