Dashboards & Visualizations

user is unable to see the results in dashboard

pratapa
Explorer

User is complaining that he is unable to see the results in Dashboard. It is saying "No results found".

I opened the query in search and executed but no events found.

Following is the search query.

stats sum(sessions) AS wsessions by _time,warehouse | timechart avg(wsessions) by warehouse

Not sure why it is not showing search results in the dashboard.

Can you please help me.

0 Karma

pratapa
Explorer

Following is the search query.

index=main sourcetype=wms_oracle_sessions | bucket span=5m _time | stats count AS sessions by _time,warehouse,machine,program | stats sum(sessions) AS wsessions by _time,warehouse | timechart avg(wsessions) by warehouse

0 Karma

BainM
Communicator

I may be Captain Obvious here, but where's your index and sourcetype?

index=?   sourcetype=? 
 | stats sum(sessions) AS wsessions by _time,warehouse | timechart avg(wsessions) by warehouse
0 Karma

jpolvino
Builder

Try unwrapping the search one part as a time. So try this:
stats sum(sessions) AS wsessions by _time,warehouse
| timechart avg(wsessions)
Then this:
stats sum(sessions) AS wsessions by _time,warehouse

Then this:
stats sum(sessions) AS wsessions
If none of these produce results, then pursue the suggestions from Rich.

richgalloway
SplunkTrust
SplunkTrust

If results are not shown in the dashboard and also are not shown in Search then either 1) the search is wrong; 2) the data isn't there; or 3) neither of you has permission to view the data.

---
If this reply helps you, Karma would be appreciated.

pratapa
Explorer

User wants results needs to be displayed on the dashboard.

What needs to be done to get the results displayed on the dashboard.

0 Karma

pratapa
Explorer

We increased the time range. But still "No results found"

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...