All Apps and Add-ons

Why is the Splunk Mobile App not rendering certain dashboards for users other than Admin?

imanpoeiri
Communicator

Dear experts,

For new users that we created, there were certain dashboard that did not display at all in the Splunk Mobile App, although appropriate permissions were already granted to those new users. Admin was working fine.

They were able to see the dashboard icon, but when they tap into the dashboard, the dashboard is blank.

Anyone with experience on the matter?

Much appreciated!

0 Karma
1 Solution

imanpoeiri
Communicator

Apparently we found there are two problem.

Problem: Dashboard completely not rendered on mobile application (iOS and Android).
Root cause: When depends="$hidden$" is applied to your tag, or tag, or `` tag.
Sample of codes that having issue:

<row depends="$hidden$">
<panel depends="$hidden$">
<input depends="$hidden$">

Solution: Avoid to use it!

Problem: Particular panels are show "waiting for input".
Root Cause: When you put time token before search that use time input token as earliest and latest tags
Sample of codes that having issues:

<row>
<panel>   
     <query>index=sample_index | fields somefield | top somefield</query>
    <earliest>$time.earliest$</earliest>
    <latest>$time.latest$</latest>
</panel>   
</row>
<row>
    <panel>
      <input type="time" token="time" searchWhenChanged="true">
        <label>Time Range</label>
        <default>
          <earliest>@d</earliest>
          <latest>now</latest>
        </default>
      </input>
    </panel>
</row>

Solution: Change the sequence as following

    <row>
        <panel>
          <input type="time" token="time" searchWhenChanged="true">
            <label>Time Range</label>
            <default>
              <earliest>@d</earliest>
              <latest>now</latest>
            </default>
          </input>
        </panel>
    </row>
    <row>
    <panel>   
         <query>index=sample_index | fields somefield | top somefield</query>
        <earliest>$time.earliest$</earliest>
        <latest>$time.latest$</latest>
    </panel>   
    </row>

Hope this clarify.

View solution in original post

imanpoeiri
Communicator

Apparently we found there are two problem.

Problem: Dashboard completely not rendered on mobile application (iOS and Android).
Root cause: When depends="$hidden$" is applied to your tag, or tag, or `` tag.
Sample of codes that having issue:

<row depends="$hidden$">
<panel depends="$hidden$">
<input depends="$hidden$">

Solution: Avoid to use it!

Problem: Particular panels are show "waiting for input".
Root Cause: When you put time token before search that use time input token as earliest and latest tags
Sample of codes that having issues:

<row>
<panel>   
     <query>index=sample_index | fields somefield | top somefield</query>
    <earliest>$time.earliest$</earliest>
    <latest>$time.latest$</latest>
</panel>   
</row>
<row>
    <panel>
      <input type="time" token="time" searchWhenChanged="true">
        <label>Time Range</label>
        <default>
          <earliest>@d</earliest>
          <latest>now</latest>
        </default>
      </input>
    </panel>
</row>

Solution: Change the sequence as following

    <row>
        <panel>
          <input type="time" token="time" searchWhenChanged="true">
            <label>Time Range</label>
            <default>
              <earliest>@d</earliest>
              <latest>now</latest>
            </default>
          </input>
        </panel>
    </row>
    <row>
    <panel>   
         <query>index=sample_index | fields somefield | top somefield</query>
        <earliest>$time.earliest$</earliest>
        <latest>$time.latest$</latest>
    </panel>   
    </row>

Hope this clarify.

Gibbo87
Explorer

What if i need to use "depends" ?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...