About davesplunkmonky

Johnvey · ‎04-09-2010

In version 4.1, there is no easy way to suppress the "no results" messaging, as it is built into the default charting modules. The charting engine itself will also not render an empty dataset. The only solution that comes to mind is to use the advanced XML to insert a condition switcher that would detect the empty result state and display a chart of a dummy dataset -- which doesn't seem to be worth all the trouble.

the_wolverine · ‎01-12-2011

That was easy! Just literally copied .splLastRefreshed { display:none; } to my application.css file for my app and it worked.

gkanapathy · ‎04-09-2010

There is not. You can create a script that is triggered after the search is done and the outputcsv has written the file and explicitly put it into a Splunk bin folder to do this, but you probably knew that. Part of the reason is security related, to prevent search users from being able to have Splunk create files in arbitary locations.

Posts	4
Solutions	0
Karma Given	0
Karma Received	6
Member Since	‎12-23-2009

Online Status	Offline
Date Last Visited	‎06-05-2020 02:02 AM

in a dashboard customer would like to show the cha...

dashboard "refreshed on <date>" is there a way to ...

outputcsv: can I tell it where to create the CSV

Re: in a dashboard customer would like to show the...

Re: dashboard "refreshed on <date>" is there a way...

Re: outputcsv: can I tell it where to create the ...