Dashboards & Visualizations

splunk dashboard basequery with datamodel

imurpalvicky
Engager

Hi Team,
I am trying to create a dashboard with base query taking values from data model . But it is not yielding any results(Only when i have that in basequery). Seems the base query syntax is wrong , since it starts with pipeline (|) . Any help on where i am going wrong.Thanks in advance

search id="test_basequery"
query | datamodel test_stats_data_model test_stats_data_set search
/query

0 Karma

lakshman239
Influencer

I have a dashboard with dropdown [ having values for sourcetype] and then base search

|datamodel Authentication Authentication search | search sourcetype=$st$

this should then take the sourcetype and pull the relevant data from datamodel. would this help?

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with William Searle

The Splunk Guy: A Developer’s Path from Web to Cloud William is a Splunk Professional Services Consultant with ...

Major Splunk Upgrade – Prepare your Environment for Splunk 10 Now!

Attention App Developers: Test Your Apps with the Splunk 10.0 Beta and Ensure Compatibility Before the ...

Stay Connected: Your Guide to June Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...