Dashboards & Visualizations

Why does an R search not work on a dashboard?

krwinters11
Path Finder

I have a search that is working great in the search app of splunk that includes and R script (through the R Project App). When I save it as a Dashboard Panel the search no longer works when I go to the dashboard, but it still works in the search app. Does anyone know why?

My hunch is that the dashboard is flattening out the lines of the R search and ignoring new lines. The search works like this:
...search... | r " source('predictR.r')
output=data.frame(predictR(input)) "
BUT not like this:
...search... | r " source('predictR.r') output=data.frame(predictR(input)) "
Which is why I think that the dashboard ignores new lines when the search app does not.

Any ideas? 🙂

1 Solution

mikebd
Path Finder

Use ; as a statement delimiter.

View solution in original post

mikebd
Path Finder

Use ; as a statement delimiter.

krwinters11
Path Finder

Awesome! thank you so much! I love when the solution is so simple 🙂

0 Karma

SanthoshSreshta
Contributor

Can we use Where condition here, so that we can get the results based on condition.???
if we can get that, can you please post the answer to

https://answers.splunk.com/answers/256185/drill-down-in-dashboard-with-r-integration-based-o.html?mi...

0 Karma

rfujara_splunk
Splunk Employee
Splunk Employee

Maybe try inserting \n at the end of each line. Just an idea...

0 Karma

krwinters11
Path Finder

It doesn't like that 😞 any other ideas?

0 Karma

aljohnson_splun
Splunk Employee
Splunk Employee

Could you try using < ![CDATA[ > in the dashboard?

0 Karma

krwinters11
Path Finder

Where would I put it in my search?

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...