Dashboards & Visualizations

Search not working when Chained

aohls
Contributor

I am using dashboard studio and had a base search that is just a macro then chained that to a search creating a table. When I try to use this in the table nothing shows up. If I take the chain search and move it fully to its own base search I get results. Is there something I am missing that a chain search can't have certain commands? I have stats and evals in there also; do they need to be part of the base search and not the chain?

Labels (1)
0 Karma

astackpole
Path Finder

Please post an example of your chained search and I can see if I can help out!

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...