Splunk dashboard not showing up the results

[gowthammahes]

Hello All,

I have created a dashboard and it is always showing no results found. But when i click on open in search or directly running the search query it is showing the results. can anyone help please.

<form version="1.1" theme="light">
<label>Successful connections by an IP range dashboard</label>
<search id="base_srch">
<query>index=prod sourcetype=auth_logs</query>
<earliest>$time.earliest$</earliest>
<latest>$time.latest$</latest>
</search>
<fieldset submitButton="false">
<input type="time" token="time" searchWhenChanged="true">
<label>test</label>
<default>
<earliest>-4h@m</earliest>
<latest>now</latest>
</default>
</input>
</fieldset>
<row>
<panel>
<chart>
<search base="base_srch">
<query>|stats count by ip</query>
</search>
<option name="charting.chart">pie</option>
<option name="charting.drilldown">none</option>
</chart>
</panel>
</row>
</form>

[ITWhisperer · Accepted solution]

Try adding a table command to your base search

<search id="base_srch">
<query>index=prod sourcetype=auth_logs | table ip</query>