Getting Data In

Splunk dashboard not showing up the results

gowthammahes
Path Finder

Hello All,

 

I have created a dashboard and it is always showing no results found. But when i click on open in search or directly running the search query it is showing the results. can anyone help please.

<form version="1.1" theme="light">
<label>Successful connections by an IP range dashboard</label>
<search id="base_srch">
<query>index=prod sourcetype=auth_logs</query>
<earliest>$time.earliest$</earliest>
<latest>$time.latest$</latest>
</search>
<fieldset submitButton="false">
<input type="time" token="time" searchWhenChanged="true">
<label>test</label>
<default>
<earliest>-4h@m</earliest>
<latest>now</latest>
</default>
</input>
</fieldset>
<row>
<panel>
<chart>
<search base="base_srch">
<query>|stats count by ip</query>
</search>
<option name="charting.chart">pie</option>
<option name="charting.drilldown">none</option>
</chart>
</panel>
</row>
</form>
Labels (1)
Tags (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

Try adding a table command to your base search

<search id="base_srch">
<query>index=prod sourcetype=auth_logs | table ip</query>

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust

Try adding a table command to your base search

<search id="base_srch">
<query>index=prod sourcetype=auth_logs | table ip</query>
Get Updates on the Splunk Community!

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

&#x1f5e3; You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...

Splunk New Course Releases for a Changing World

Every day, the world feels like it’s moving faster with new technological breakthroughs, AI innovation, and ...

Insights from .conf 2025, Smart Edge Processor Scaling, and a New Splunk Lantern ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...