Dashboards & Visualizations
Highlighted

user is unable to see the results in dashboard

Explorer

User is complaining that he is unable to see the results in Dashboard. It is saying "No results found".

I opened the query in search and executed but no events found.

Following is the search query.

stats sum(sessions) AS wsessions by _time,warehouse | timechart avg(wsessions) by warehouse

Not sure why it is not showing search results in the dashboard.

Can you please help me.

0 Karma
Highlighted

Re: user is unable to see the results in dashboard

Explorer

We increased the time range. But still "No results found"

0 Karma
Highlighted

Re: user is unable to see the results in dashboard

Explorer

User wants results needs to be displayed on the dashboard.

What needs to be done to get the results displayed on the dashboard.

0 Karma
Highlighted

Re: user is unable to see the results in dashboard

SplunkTrust
SplunkTrust

If results are not shown in the dashboard and also are not shown in Search then either 1) the search is wrong; 2) the data isn't there; or 3) neither of you has permission to view the data.

---
If this reply helps you, an upvote would be appreciated.
Highlighted

Re: user is unable to see the results in dashboard

Builder

Try unwrapping the search one part as a time. So try this:
stats sum(sessions) AS wsessions by _time,warehouse
| timechart avg(wsessions)
Then this:
stats sum(sessions) AS wsessions by _time,warehouse

Then this:
stats sum(sessions) AS wsessions
If none of these produce results, then pursue the suggestions from Rich.

Highlighted

Re: user is unable to see the results in dashboard

Communicator

I may be Captain Obvious here, but where's your index and sourcetype?

index=?   sourcetype=? 
 | stats sum(sessions) AS wsessions by _time,warehouse | timechart avg(wsessions) by warehouse
0 Karma
Highlighted

Re: user is unable to see the results in dashboard

Explorer

Following is the search query.

index=main sourcetype=wmsoraclesessions | bucket span=5m _time | stats count AS sessions by _time,warehouse,machine,program | stats sum(sessions) AS wsessions by _time,warehouse | timechart avg(wsessions) by warehouse

0 Karma