Splunk Search

Results are not shown when a report is opened in pivot mode

chinmayc469
Explorer

I have a pivot report built on data set. When i open the report, the results are coming clearly but when i opened the report in pivot mode(edit mode), it shows "your search returned no results".

My data set base search is something like this: "index=summary_index |sort - X | dedup Y| table *| fillnull value=NULL"

1) Anyone know what is the problem here?

2) And how the time range values are replaced in pivot searches?

Many Thanks in advance.

Tags (1)
0 Karma

richardphung
Communicator

Do any of your fields have spaces in them?
This happened to me.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...