Dashboards & Visualizations

Search fails when moved to Dashboard

joelm1822
Loves-to-Learn Lots

I'm new to Splunk.

I've got a Search that works fine in the Search screen and correctly generates a bar chart.

index="production" source="s3://hydrow-android-logs-input-queue-prod/console/*" logWorkoutEndDebugStats releaseStage="production"
| rename workoutEndInfo.videoRestartStats.videoStopped as videoStops
| stats count by buildNumber, videoStops
| eventstats sum(count) as itemTotal by buildNumber
| eval percentage=round((count / itemTotal) * 100 , 1 )
| search videoStops = true
| chart values(percentage) over buildNumber by videoStops

 

Error when rendering as chart on a dashboard:

Screen Shot 2021-09-18 at 11.12.43 AM.png

 

When I Save it to a dashboard or create a new chart on the dashboard and enter the search as the datasource, I get the error below.  if I change the visualization from a chart to a table, then the table renders fine.  There's no indication of why the visualization works fine on the Search page, but not the dashboard.  

Any suggestions on how to debug this would be very welcome!

 

 

Labels (1)
0 Karma

ashvinpandey
Communicator

@joelm1822 Can you show the source code error ?

0 Karma

ro_mc
Explorer

Do the _internal logs provide any additional information?

Does the same issue occur regardless of whether the search is inline or report-driven?

Does the browser console provide some more insight into the JavaScript error?

Potentially authorisation or app scope issues, or a need to separate into base and post process searches.

0 Karma

joelm1822
Loves-to-Learn Lots

I don't know how to find the source code of the error. I'll do some digging to find the internal logs.  (I'm new to Splunk and more used to tools that show you the error rather than hiding it log files somewhere else.  Is it even possible with SplunkCloud?)

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!