Splunk Search

Results are not shown when a report is opened in pivot mode


I have a pivot report built on data set. When i open the report, the results are coming clearly but when i opened the report in pivot mode(edit mode), it shows "your search returned no results".

My data set base search is something like this: "index=summary_index |sort - X | dedup Y| table *| fillnull value=NULL"

1) Anyone know what is the problem here?

2) And how the time range values are replaced in pivot searches?

Many Thanks in advance.

Tags (1)
0 Karma


Do any of your fields have spaces in them?
This happened to me.

0 Karma
Get Updates on the Splunk Community!

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...

IM Landing Page Filter - Now Available

We’ve added the capability for you to filter across the summary details on the main Infrastructure Monitoring ...

Dynamic Links from Alerts to IM Navigators - New in Observability Cloud

Splunk continues to improve the troubleshooting experience in Observability Cloud with this latest enhancement ...