Dashboards & Visualizations

Splunk Dashboard Dropdown Input/filter not returning anything

chongdong
Explorer

Hi all,

I have encountered a weird issue in Splunk.

Basically I have added a dropdown input/filter with the following settings: 

chongdong_0-1675132188444.png

But after hitting "Apply", it says "Search produced no results".

The weird thing is if I run the search seperately, it does have results:

chongdong_1-1675132275303.png

So does Splunk disallow using the following query in the filter/input? 

|dbxquery connection=100892_intelligence query="SELECT zone_name from win_data"

Labels (1)
0 Karma
1 Solution

bowesmana
SplunkTrust
SplunkTrust

You are selecting the zone_name field but your field for label/value are label and uniqueid. Do you have those fields in your returned dbxquery data?

View solution in original post

bowesmana
SplunkTrust
SplunkTrust

You are selecting the zone_name field but your field for label/value are label and uniqueid. Do you have those fields in your returned dbxquery data?

chongdong
Explorer

You are right! Thanks for pointing it out. Now it works! 

chongdong_1-1675191510201.png

 

 

0 Karma

bowesmana
SplunkTrust
SplunkTrust

That's good - please mark the answer as the solution, as it makes it clear for others to find solutions to similar issues. Thanks.

0 Karma
Get Updates on the Splunk Community!

Exporting Splunk Apps

Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...

Cisco Use Cases, ITSI Best Practices, and More New Articles from Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...