All Apps and Add-ons

Splunk 6.x Dashboard Examples: Why am I getting error "No search query provided" when I execute the Post Process Search?

laxman413
Engager

I have installed the Splunk 6.x Dashboard Examples app and when I execute the "Post Process Search" I receive the "No search query provided" error in all of the panels of the dashboard. What am I missing?

nfilippi_splunk
Splunk Employee
Splunk Employee

This is expected behavior.

In Splunk 6.2, the syntax for search has been greatly enhanced, where the Splunk 6.x Dashboard Examples v3.0 has also been updated to reflect these changes. If you refer to the main examples page, there is a compatibility label that indicates, for these search specific examples, they are only compatible with Splunk 6.2.

If you are interested in post process search examples that are compatible with 6.1, I would recommend downgrading the app to v2.0.1.

alt text

laxman413
Engager

I am using Splunk Dashbaord 6 Examples and the app version is 3 and my Splunk version is 6.1.3

0 Karma

ppablo
Retired

Cool thanks for the info. I needed to edit the post appropriately to tag the right app and make the question/content more concise. 🙂

0 Karma

ppablo
Retired

Hi @laxman413

Which Dashboard Examples App are you referring to?

Splunk Dashboard Examples (which is for Splunk 5.x) or Splunk 6.x Dashboard Examples?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...