Why export button is grayed out in some of my panels?

[lior_g]

Hi,

I have a dashboard with some panels. Only in one of the panels, the Export button (the one next to the Open in Search, Inspect and Refresh buttons) is grayed out.
In other dashboards i created, this button is grayed out in all panels.
The problem occurs to all users, including admins.

What can be the cause for this?

[TVS]

Like mentioned by other,  below usage will disable the export option.

<search base="YourBaseSearch">
<query>
| search customkey="search filter"
</query>

Workaround:

Instead use the saved search as below will enable the download link

<search>
<query>
| savedsearch YourBaseSearchName
| search customkey="search filter"
....
</query>
</search>

[santosh_sshanbh]

However the savedsearch workaround defects the purpose of using base search. In my case the similar SPL is used multiple times so I have to use base search to optimize the dashboard. However, instead of that if I have to use SavedSearch at each place then its not giving any benefit in terms of performance.

Splunk is very slow to fix this issue which is being there for long time. They should provide some alternative not at the cost of performance.

[webexpert]

Is it fixed for export button is grayed out for base dashboard or post press search?

Thank you,Is it fixed for post press search for download arrow grey out

[anwarmian]

As of today (April 29, 2020) post process panels export button is still greyed out.

[santosh_sshanbh]

IS there any workaround for this issue? How can a product be so much constrained and not fixed the problem for long time? Splunk what is your plan for this?

[cmerriman · Accepted solution]

are some panels created with a post process? if there is a base search attributing to some panels, you aren't able to export the panel itself, only open it in search, inspect and refresh. it is a drawback, in my opinion, to post processing, and should be an enhancement.

[anwarmmian]

One option is to click in the hour glass next to the down arrow. It will open the search on a new window and you can download it from there.

[donelliot]

It is still an issue in 8.0.1

[mbrunetto]

definitely would like to see this fixed!

[grittonc]

This x1000. Needs to be changed by Splunk.

[niketnilay]

@grittonc maybe check out Splunk Next Beta announced by Splunk at .Conf 2018 which had Splunk Developer Cloud and SPL v2.

https://www.splunk.com/blog/2018/10/03/new-for-developers-splunk-developer-cloud-more.html

[fsolercasanova]

As of 01/2019, In Splunk 7.1.2,

Using Bases for Dashboard panel searches still breaks the export functionality.

This has been a known issue for at least three years based off: https://answers.splunk.com/answers/367069/in-all-my-forms-with-post-process-search-the-expor.html

Are there any plans to fix this feature @splunk ?

[lior_g]

You are right, only in panels without a base search the Export button is enabled...
Splunk should do something about it! I can't give up on post processing.

Thank you!

[mschellhouse]

This definitely needs to be addressed. Reduces the value of base search setup.