User is complaining that he is unable to see the results in Dashboard. It is saying "No results found".
I opened the query in search and executed but no events found.
Following is the search query.
stats sum(sessions) AS wsessions by _time,warehouse | timechart avg(wsessions) by warehouse
Not sure why it is not showing search results in the dashboard.
Can you please help me.
Following is the search query.
index=main sourcetype=wms_oracle_sessions | bucket span=5m _time | stats count AS sessions by _time,warehouse,machine,program | stats sum(sessions) AS wsessions by _time,warehouse | timechart avg(wsessions) by warehouse
I may be Captain Obvious here, but where's your index and sourcetype?
index=? sourcetype=?
| stats sum(sessions) AS wsessions by _time,warehouse | timechart avg(wsessions) by warehouse
Try unwrapping the search one part as a time. So try this:
stats sum(sessions) AS wsessions by _time,warehouse
| timechart avg(wsessions)
Then this:
stats sum(sessions) AS wsessions by _time,warehouse
Then this:
stats sum(sessions) AS wsessions
If none of these produce results, then pursue the suggestions from Rich.
If results are not shown in the dashboard and also are not shown in Search then either 1) the search is wrong; 2) the data isn't there; or 3) neither of you has permission to view the data.
User wants results needs to be displayed on the dashboard.
What needs to be done to get the results displayed on the dashboard.
We increased the time range. But still "No results found"