Dashboards & Visualizations

Chart not showing up

lmalhoit
Explorer

Hi All, I'm pretty new to splunk. I was setting up my dashboard and tried to create a chart using the Top 5 Source Types saved search. It doesn't give an error or anything...just doesn't show anything. I've let it run for a day, to be on the safe side, but still nothing. When I click on View Results, it goes to the search and shows me the 5 source types, no problem. Here is the saved search:

index=_internal (source=/metrics.log OR source=\metrics.log) group=per_sourcetype_thruput | chart sum(kb) by series | sort -sum(kb) | head 5

Any suggestions?

Thanks!

Tags (3)

lmalhoit
Explorer

Your question about Flash got me thinking. I was using Chrome...so I tried Firefox and that seemed to fix it. Sorry for the stupid question!

Thanks!

0 Karma

thall79
Communicator

There is never a stupid question, glad you were able to fix it.

0 Karma

thall79
Communicator

Just curious are you building a simple dashboard? If so did you try and select Data table from the panel style drop down instead of chart to see if you get results on that dashboard?

Next question are you able to see other flash charts in Splunk?

And what version of Splunk are you using?

Travis.

lmalhoit
Explorer

I believe it is just a simple dashboard. I did select Chart in the drop down, though. I am able to see other charts when I do a Search...I can see the bar graphs, for example.
This is version 4.1.6

Thanks!

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...