Dashboards & Visualizations

Splunk Dashboard Dropdown Input/filter not returning anything

chongdong
Explorer

Hi all,

I have encountered a weird issue in Splunk.

Basically I have added a dropdown input/filter with the following settings: 

chongdong_0-1675132188444.png

But after hitting "Apply", it says "Search produced no results".

The weird thing is if I run the search seperately, it does have results:

chongdong_1-1675132275303.png

So does Splunk disallow using the following query in the filter/input? 

|dbxquery connection=100892_intelligence query="SELECT zone_name from win_data"

Labels (1)
0 Karma
1 Solution

bowesmana
SplunkTrust
SplunkTrust

You are selecting the zone_name field but your field for label/value are label and uniqueid. Do you have those fields in your returned dbxquery data?

View solution in original post

bowesmana
SplunkTrust
SplunkTrust

You are selecting the zone_name field but your field for label/value are label and uniqueid. Do you have those fields in your returned dbxquery data?

chongdong
Explorer

You are right! Thanks for pointing it out. Now it works! 

chongdong_1-1675191510201.png

 

 

0 Karma

bowesmana
SplunkTrust
SplunkTrust

That's good - please mark the answer as the solution, as it makes it clear for others to find solutions to similar issues. Thanks.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...

Starting With Observability: OpenTelemetry Best Practices

Tech Talk Starting With Observability: OpenTelemetry Best Practices Tuesday, October 17, 2023   |  11AM PST / ...