Dashboards & Visualizations

How to prevent Splunk from removing spaces in dashboard searches?

isp_user
New Member

Hi Everyone,

I have problem with search command in dashboard panel.

When I put below search:

source=isp_portal Message="Request Url - http*"

it works then I save dashboards

After saving the search, it does not work and look like below (without space)

source=isp_portal Message="Request Url-http*"

What should I set to prevent removing spaces in searches?

Thanks in advance for help

0 Karma

spammenot66
Contributor

For your dashboard try replacing space with

source=isp_portal Message="Request Url - http*"

isp_user
New Member

Hi cmeriman,

Splunk Version ............................................6.5.1S
Splunk Build ............................................f74036626f0c

Firstt i put Reports (with search which works) into dashboard ( Panel powered by Inline Search).
After couple of minutes , when I refreshing dashboard the reports does not presented data.
Then I click Edit Search in particular reports in dashboard and I see search string without spaces.

0 Karma

cmerriman
Super Champion

If you have the search saved as a report and it is working, why not keep it as a report in the dashboard panel instead of an inline search? Otherwise have you tried editing the search to put the spaces back in? I've never had a problem before, but I normally keep reports as reports in my dashboard panels instead of converting them.

0 Karma

cmerriman
Super Champion

what version of Splunk are you on? Did you save it to a dashboard from the search bar or create a new search while editing a dashboard?

0 Karma
Get Updates on the Splunk Community!

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud  In today’s fast-paced digital ...

Observability protocols to know about

Observability protocols define the specifications or formats for collecting, encoding, transporting, and ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...