Dashboards & Visualizations

Pie Chart Not Showing Slices? But Shows Data?

aferone
Builder

alt text

alt text

All of a sudden, on only some of the charts in this dashboard, I am seeing what's in the pics attached. The data is there, and the logs are there, but the slices are not rendering in the pie charts. Has anyone seen this before?

Thanks!

Tags (3)
0 Karma
1 Solution

aferone
Builder

I found the issue, but I am not sure why it is the answer.

These dashboards are built on summary indexes. I was using "search_name"= for the report that generates the data. I switched it to "source=", and now everything works. I had forgotten that we had this issue before, and that was the fix.

Thanks!

View solution in original post

0 Karma

aferone
Builder

I found the issue, but I am not sure why it is the answer.

These dashboards are built on summary indexes. I was using "search_name"= for the report that generates the data. I switched it to "source=", and now everything works. I had forgotten that we had this issue before, and that was the fix.

Thanks!

0 Karma

woodcock
Esteemed Legend

Your count values are all zero; there is nothing to display! Click on one of the 0 values to open in search and figure out what is broken.

0 Karma

aferone
Builder

That is part of the problem. There are results. When you click on 0, there are results. There wouldn't be 4 entries listed if there were 0 results.

0 Karma

woodcock
Esteemed Legend

Yes, there would, depending on what you are counting! You have events and your events have the by field but they may not have the things that you are counting so the count of those things is 0. For example, if you are using something like count(eval(SomeField="SomeValue")) and your field extractions for SomeField are broken (or if the work but none has the value SomeValue) then your counts will be 0. This is exactly why you should always include the searches, configurations and sample event data.

0 Karma

aferone
Builder

But these are dashboards that are almost a year old. They've worked with no issue until this morning.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...