All Apps and Add-ons

Splunk for Windows Infrastructure app -Dashboard issue

tkwaller
Builder

Hello

I installed and deployed the Splunk for Windows Infrastructure app some time ago and most of it works except the Performance Monitoring dashboard has no data. I can open the dashboard and run the searches(you have to go to the job inspector to actually see the searches) that are populating that dashboard and get results but there's still no data in the dashboard.

For example this search when I run it returns sparklines with results by host:
search eventtype="perfmon_windows" (Host="*") Host="*" object="Processor" counter="% User Time" instance="*" | stats sparkline(avg(Value)) as Trend avg(Value) as Average, max(Value) as Peak, latest(Value) as Current, latest(_time) as "Last Updated" by Host | convert ctime("Last Updated") | sort - Current | eval Average=round(Average, 2) | eval Peak=round(Peak, 2) | eval Current=round(Current, 2)

BUT this dashboard panel shows no data over the last 24 hours.(I would attach screenshots if I could)

What would be causing this?

Thanks

Todd Waller

0 Karma
1 Solution

tkwaller
Builder

This is actually a bug and has been reported to Splunk Support

View solution in original post

tkwaller
Builder

This is actually a bug and has been reported to Splunk Support

Get Updates on the Splunk Community!

This Week's Community Digest - Splunk Community Happenings [9.26.22]

Get the latest news and updates from the Splunk Community here! Upcoming User Group Events! 👏 Check ...

BSides Splunk 2022 - The Call for Papers is now Open!

TLDR; Main Site: https://bsidessplunk.com CFP Site: https://bsidessplunk.com/cfp CFP Opens: December 15th, ...

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...