All Apps and Add-ons

Splunk for Windows Infrastructure app -Dashboard issue

tkwaller
Builder

Hello

I installed and deployed the Splunk for Windows Infrastructure app some time ago and most of it works except the Performance Monitoring dashboard has no data. I can open the dashboard and run the searches(you have to go to the job inspector to actually see the searches) that are populating that dashboard and get results but there's still no data in the dashboard.

For example this search when I run it returns sparklines with results by host:
search eventtype="perfmon_windows" (Host="*") Host="*" object="Processor" counter="% User Time" instance="*" | stats sparkline(avg(Value)) as Trend avg(Value) as Average, max(Value) as Peak, latest(Value) as Current, latest(_time) as "Last Updated" by Host | convert ctime("Last Updated") | sort - Current | eval Average=round(Average, 2) | eval Peak=round(Peak, 2) | eval Current=round(Current, 2)

BUT this dashboard panel shows no data over the last 24 hours.(I would attach screenshots if I could)

What would be causing this?

Thanks

Todd Waller

0 Karma
1 Solution

tkwaller
Builder

This is actually a bug and has been reported to Splunk Support

View solution in original post

tkwaller
Builder

This is actually a bug and has been reported to Splunk Support

Get Updates on the Splunk Community!

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

Getting Started with AIOps: Event Correlation Basics and Alert Storm Detection in ...

Getting Started with AIOps:Event Correlation Basics and Alert Storm Detection in Splunk IT Service ...

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...