On the Search and Reporting main page there is no "What to Search" panel that was mentioned in the Splunk Fundamentals 1 training, Anyone know why it might not be there and I would be able to access it?
Same thing is happening to me as well, uploaded the files as instructed in module 4 twice but still missing. Can't follow along with this rest of the training modules now unfortunately. Any help would be appreciated!
Same issue, try clicking "data summary" under the How to Search tab
Was there ever a solution to this? I'm at the same stage in Fund. 1 and don't see a "What to Search".....
Splunk Fundamentals 1 training, it says after you've added all the data that the "What to Search" panel will show a summary
What to Search
239,625 Events a month ago etc
This does not show up.
Instead it just has the 3 buttons
Documentation Tutorial Data Summary
Question: how do you get the summary to to show up?
Hello, did you ever find the What to Search panel? I'm in the same situation, doing the training, but the panel isn't there. Using version 8.1.0 which is the most current version, documentation I've found online for 8.1.0 says it should be there, but I don't see it anywhere.
Thanks
Be glad it's not there. That panel runs a real-time search to show something of little value. Many shops disable that feature so RT searches don't hog resources.
Greetings @feargusmac,
Are you sure you're looking at the right place? This is what the URL should be: [YourSplunkMachine]:8000/en-US/app/search/search
I also am having this issue. I am at the link http://localhost:8000/en-US/app/search/search but there is no panel titled "What to Search". It is replaced with a panel titled "Analyze Your Data with Table Views New!!"
Hi, thanks for the response. I am on that same page on my company's Splunk instance and it looks just like that except the "What to Search" panel is not there.