Dashboards & Visualizations
×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
Solved! Jump to solution

"No results found" in dashboard replace with another result

user2020dy
Path Finder
‎11-24-2020 05:29 AM

I have a panel in a dashboard running correctly, but the data doesn`t appear in this dashboard every day.

user2020dy_0-1606224233101.png

 

What I want is to know, is it possible to show another panel instead of this, when I get no results in this search query? It is not comfortable to look at this empty hole.

 

I mean, if there are results - show this panel.

If there are no results - show another one instead of this.

Labels (5)
0 Karma
Reply
1 Solution
Solved! Jump to solution
Solution

impurush
Contributor
‎11-24-2020 12:15 PM

Hi @user2020dy ,

You need to use two different tokens and two different panels to be successful in your requirement. I have faced the same problem and implemented the below code to reach the expected output.

<row>
<panel depends="$value$">
      <title>DNS</title>
      <single>
        <search>
          <progress>
            <condition match="$job.resultCount$&gt;1">
              <set token="novalue">true</set>
              <unset token="value"></unset>
            </condition>
            <condition>
              <set token="value">true</set>
              <unset token="novalue"></unset>
            </condition>
          </progress>
          <query>Your query</query>
          <earliest>-5m</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
        </search>
      </single>
    </panel>
    <panel depends="$novalue$">
      <title>DNS</title>
      <html>
        <br/>
        <br/>
        <h1 align="center">No Value</h1>
      </html>
    </panel>
</row>




View solution in original post

0 Karma
Reply
Solved! Jump to solution
Solution

impurush
Contributor
‎11-24-2020 12:15 PM

Hi @user2020dy ,

You need to use two different tokens and two different panels to be successful in your requirement. I have faced the same problem and implemented the below code to reach the expected output.

<row>
<panel depends="$value$">
      <title>DNS</title>
      <single>
        <search>
          <progress>
            <condition match="$job.resultCount$&gt;1">
              <set token="novalue">true</set>
              <unset token="value"></unset>
            </condition>
            <condition>
              <set token="value">true</set>
              <unset token="novalue"></unset>
            </condition>
          </progress>
          <query>Your query</query>
          <earliest>-5m</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
        </search>
      </single>
    </panel>
    <panel depends="$novalue$">
      <title>DNS</title>
      <html>
        <br/>
        <br/>
        <h1 align="center">No Value</h1>
      </html>
    </panel>
</row>




0 Karma
Reply
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...