https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-this-Unknown-SID-Error/m-p/609714#M105693 <P>I am Learning Splunk the hard way I think, but here are my questions: if I have been able to have logs forwarded and if I can generate information from my host which right now is just the instance that my Splunk is running on how can the error in the picture exist. Seems to me like if I'm getting any kind of data in I should be getting all the data in especially if its simple like running processes.<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="question erros.PNG" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/21059iE8160C4E078DB289/image-size/large?v=v2&amp;px=999" role="button" title="question erros.PNG" alt="question erros.PNG" /></span></P> Wed, 17 Aug 2022 14:17:32 GMT domino30 2022-08-17T14:17:32Z https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-this-Unknown-SID-Error/m-p/609714#M105693 <P>I am Learning Splunk the hard way I think, but here are my questions: if I have been able to have logs forwarded and if I can generate information from my host which right now is just the instance that my Splunk is running on how can the error in the picture exist. Seems to me like if I'm getting any kind of data in I should be getting all the data in especially if its simple like running processes.<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="question erros.PNG" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/21059iE8160C4E078DB289/image-size/large?v=v2&amp;px=999" role="button" title="question erros.PNG" alt="question erros.PNG" /></span></P> Wed, 17 Aug 2022 14:17:32 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-this-Unknown-SID-Error/m-p/609714#M105693 domino30 2022-08-17T14:17:32Z https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-this-Unknown-SID-Error/m-p/609792#M105699 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/248632">@domino30</a>,</P><P>in your panel's search there's a token without values, control it.</P><P>The message in the Job Inspector isn't relevant because the search is waiting for the missed value.</P><P>If you want an help, please share the full dashboards code.</P><P>Ciao.</P><P>Giuseppe</P> Wed, 17 Aug 2022 07:53:57 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-this-Unknown-SID-Error/m-p/609792#M105699 gcusello 2022-08-17T07:53:57Z https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-this-Unknown-SID-Error/m-p/610709#M105814 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/248632">@domino30</a>,</P><P>good for you, see next time!</P><P>Ciao and happy splunking</P><P>Giuseppe</P><P>P.S.: Karma Points are appreciated <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Wed, 24 Aug 2022 15:10:53 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-this-Unknown-SID-Error/m-p/610709#M105814 gcusello 2022-08-24T15:10:53Z