Why are my dashboard panels using a base search showing no results, but shows results if opened in search?

[hettervik]

Hi,

I've encountered this problem a couple of times now.

I have a dashboard where some of the panels run on a base search to save computing power. When I open the dashboard the panels using the base search are showing zero results, but if I open them in search I get the results I want. I'll provide the XML. Why could it be that this is happening? Is there some sort of missing capability that prevents me from seeing the results in the dashboard or app even though I can see the correct results when the panel is opened in search?

<search id="manageStoreEmployee">
    <query>eventtype=a OR eventtype=b</query>
    <earliest>$token_time_picker.earliest$</earliest>
    <latest>$token_time_picker.latest$</latest>
</search>

<panel>
      <title>Manage Store Employee - Front-End</title>
      <single>
        <search base="manageStoreEmployee">
          <query>| stats count(eval(status!=422)) as success</query>
        </search>
      </single>
</panel>
<panel>
      <title>Manage Store Employee - Back-End</title>
      <single>
        <search base="manageStoreEmployee">
          <query>| stats count(eval(status!=502)) as success</query>
        </search>
      </single>
</panel>

[chuckers]

More generically, put a

| fields *

at the end of the base query. This will make certain that you have all the fields you need for all the other panels that might reference that base.

[edoardo_vicendo]

I woud add that, instead of using:

| fields *

it is better to extract only the fields you need later on in all the other dashboard panels, this will improve the performance of the entire dashboard, here below the example:

| fields field1, field2, field3 etc..

[edoardo_vicendo]

Thanks, this suggestion fixed my issue

[christoffertoft]

Thank you for this.. Solved my issue

[cpershey]

this answer fixed my dashboard

[renjith_nair · Accepted solution]

Can you try this in your base search

eventtype="a" OR eventtype="b" | fields status, other fields

It's possible that filed extraction is not happening in dashboard since it runs search in smart mode by default

[hettervik]

That worked perfectly, I'd never thought of that being the problem. Thanks a lot!