Why does the saved search doesn't appear in the dashboard panel?

[zeespl]

I have created a scheduled report and I am calling it in dashboard panel as base search.

I have applied some more filter to it and displayed in panel. But it says “ No results found”. Although when I click on "open in search" it works fine.
Even the saved results are fine.

Could you please advise what could be the issue?

[renjith_nair · Accepted solution]

@zeespi,

Try mentioning the fields explicitly in the base search if you are using a post process search.

For e.g. base search |fields abc,xyz or even base search|fields * should do

In most of the similar cases, the post process search might be based on an extracted field and is not available in dashboard since dashboard by default runs the search in smart mode.

Reference : http://docs.splunk.com/Documentation/Splunk/latest/Search/Changethesearchmode

[zeespl]

Thanks Renjith. I already tried with table instead of fields and it worked.
Does this make any difference?

[renjith_nair]

They are almost same but you should not use the table command for charts (such as chart or timechart). Splunk Web requires the internal fields, which are the fields that begin with an underscore character, to render the charts. The table command strips these fields out of the results by default. To build charts, you should use the fields command instead. The fields command always retains all the internal fields.
http://docs.splunk.com/Documentation/Splunk/7.1.2/SearchReference/Table

[zeespl]

Thanks renjith.

[vishaltaneja070]

Filters means, drill down, checkbox etc.

[zeespl]

No. Post process search. I am transforming the saved search result to display in dashboard panel.