Deployment Architecture

Why does Timechart only shows Nulls on Dashboard?

P_Orourke
Loves-to-Learn Lots

Hey,

I am using a timechart on my dashboard, but it only shows NULL values. When I run the same search on search console, it shows all values as expected. What is the issue?

Here is how it looks when I run it in the Search:
Timecaht_Normal_In_Search.PNG

Here is how the timechart looks in the dashboard:
Timecaht_Bad_In_Dashbaord.PNG

Here is the XML code for the dashbaord:
Timecaht_Bad_XML.PNG


Can you please help?

Labels (1)
Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The base query is not transforming so no fields are available for post-processing.  Try adding | fields * to the base.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...