Dashboards & Visualizations

Splunk Dashboard Dropdown Input/filter not returning anything

chongdong
Explorer

Hi all,

I have encountered a weird issue in Splunk.

Basically I have added a dropdown input/filter with the following settings: 

chongdong_0-1675132188444.png

But after hitting "Apply", it says "Search produced no results".

The weird thing is if I run the search seperately, it does have results:

chongdong_1-1675132275303.png

So does Splunk disallow using the following query in the filter/input? 

|dbxquery connection=100892_intelligence query="SELECT zone_name from win_data"

Labels (1)
0 Karma
1 Solution

bowesmana
SplunkTrust
SplunkTrust

You are selecting the zone_name field but your field for label/value are label and uniqueid. Do you have those fields in your returned dbxquery data?

View solution in original post

bowesmana
SplunkTrust
SplunkTrust

You are selecting the zone_name field but your field for label/value are label and uniqueid. Do you have those fields in your returned dbxquery data?

chongdong
Explorer

You are right! Thanks for pointing it out. Now it works! 

chongdong_1-1675191510201.png

 

 

0 Karma

bowesmana
SplunkTrust
SplunkTrust

That's good - please mark the answer as the solution, as it makes it clear for others to find solutions to similar issues. Thanks.

0 Karma
Get Updates on the Splunk Community!

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

Customer Experience | Join the Customer Advisory Board!

Are you ready to take your Splunk journey to the next level? 🚀 We invite you to join our elite squad ...