Dashboards & Visualizations

Pie Chart Not Showing Slices? But Shows Data?

aferone
Builder

alt text

alt text

All of a sudden, on only some of the charts in this dashboard, I am seeing what's in the pics attached. The data is there, and the logs are there, but the slices are not rendering in the pie charts. Has anyone seen this before?

Thanks!

Tags (3)
0 Karma
1 Solution

aferone
Builder

I found the issue, but I am not sure why it is the answer.

These dashboards are built on summary indexes. I was using "search_name"= for the report that generates the data. I switched it to "source=", and now everything works. I had forgotten that we had this issue before, and that was the fix.

Thanks!

View solution in original post

0 Karma

aferone
Builder

I found the issue, but I am not sure why it is the answer.

These dashboards are built on summary indexes. I was using "search_name"= for the report that generates the data. I switched it to "source=", and now everything works. I had forgotten that we had this issue before, and that was the fix.

Thanks!

0 Karma

woodcock
Esteemed Legend

Your count values are all zero; there is nothing to display! Click on one of the 0 values to open in search and figure out what is broken.

0 Karma

aferone
Builder

That is part of the problem. There are results. When you click on 0, there are results. There wouldn't be 4 entries listed if there were 0 results.

0 Karma

woodcock
Esteemed Legend

Yes, there would, depending on what you are counting! You have events and your events have the by field but they may not have the things that you are counting so the count of those things is 0. For example, if you are using something like count(eval(SomeField="SomeValue")) and your field extractions for SomeField are broken (or if the work but none has the value SomeValue) then your counts will be 0. This is exactly why you should always include the searches, configurations and sample event data.

0 Karma

aferone
Builder

But these are dashboards that are almost a year old. They've worked with no issue until this morning.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...