Splunk Search

Dashboard_live not showing all data after license change

asmithe
Path Finder

After upgrading license from free to enterprise, the default search dashboard displayed no data.

Search on Splunk Answers revealed nothing specific to this problem.

Found a related problem in this answer, and turns out if you check out the user roles and mistakenly click on something then try to use the browser back button, you may still change some of the default settings.

0 Karma
1 Solution

asmithe
Path Finder

In user roles, make sure to set "Indexes searched by default" to include whichever indices you want searched in dashboard_live.

View solution in original post

0 Karma

asmithe
Path Finder

In user roles, make sure to set "Indexes searched by default" to include whichever indices you want searched in dashboard_live.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...