- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- How to troubleshoot dashboard not showing panels a...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi, we have an app where one dashboard doesn't come up with the expected results. It either doesn't load fully or says no results found. I have created a test user for that app and was checking ... still the issue is there. Can you please help me how to troubleshoot?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi shraddhamuduli,
your question is rather vague, but I'll try to share some idea:
the process to create a dashboard I use is something like this:
- at first write on a document what you expect from each panel and create a general mockup of you dashboard (at least in your mind),
- after create a search for each panel to exactly extract the result you like,
- then think to output (stats, timechart, table).
Now you can check your result compating them with the starting document, if there are differences or the search doesn't run as you like, come back to debug your search,
delete a part of your search starting by the end until the first pipe "|": if the result is the one you like, you have found the point of the problem, otherwise, continue to delete another part of your search from the end to the first pipe you find.
Put special attention to "search", "where" and "dedup" commands and remember that after a stats command you haven't all the fields!
Another attention point is time period: in test don't use "now" as latest because results could change for new ingested logs, instead use always a fixed period (e.g. yesterday or last hour) but never "now".
If you share your search I could try to help you.
Bye.
Giuseppe
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
is everyone using the same browser? i have noticed that sometimes there are failures with IE.
have you made sure all the users have permissions to the same data sets? If one user (test user for instance) doesn't have access to the exact same data set as everyone else, some data will be missing.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thankyou so much. I investigated something.. Historical searched reached maximum concurrent searches. Limit =xy.. Is this responsible?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
how many searches/subsearches are in this dashboard?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi shraddhamuduli,
your question is rather vague, but I'll try to share some idea:
the process to create a dashboard I use is something like this:
- at first write on a document what you expect from each panel and create a general mockup of you dashboard (at least in your mind),
- after create a search for each panel to exactly extract the result you like,
- then think to output (stats, timechart, table).
Now you can check your result compating them with the starting document, if there are differences or the search doesn't run as you like, come back to debug your search,
delete a part of your search starting by the end until the first pipe "|": if the result is the one you like, you have found the point of the problem, otherwise, continue to delete another part of your search from the end to the first pipe you find.
Put special attention to "search", "where" and "dedup" commands and remember that after a stats command you haven't all the fields!
Another attention point is time period: in test don't use "now" as latest because results could change for new ingested logs, instead use always a fixed period (e.g. yesterday or last hour) but never "now".
If you share your search I could try to help you.
Bye.
Giuseppe
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Cusello ,
I have dashboard ! problem is sometimes data comes fully sometimes page doesnt load fully thats my issue.
Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey
Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...
Monitoring Amazon Elastic Kubernetes Service (EKS)
