Splunk Search

Results are not shown when a report is opened in pivot mode


I have a pivot report built on data set. When i open the report, the results are coming clearly but when i opened the report in pivot mode(edit mode), it shows "your search returned no results".

My data set base search is something like this: "index=summary_index |sort - X | dedup Y| table *| fillnull value=NULL"

1) Anyone know what is the problem here?

2) And how the time range values are replaced in pivot searches?

Many Thanks in advance.

Tags (1)
0 Karma


Do any of your fields have spaces in them?
This happened to me.

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!