I built a Saved Search and configured a Dashboard to include that Saved Search (below). In a panel of this Dashboard, I configured a report based on this saved search.
When I load the Dashboard, the search is started and stops showing NO data and a message below the graphic said that the results were truncated, and No data is shown. Opening in search I get a lot of results in events....
The Saved Search:
index=acess_web |eval Gb=bytes_in/1073741824| timechart span=1d sum(Gb)
Screenshot:
imageshack.com/a/img571/9028/ddaw.png
Thanks for any help
