topic Unable to load query json. Error: Error Message: Expecting value: line 1 column 1 (char 0) in Splunk SOAR https://community.splunk.com/t5/Splunk-SOAR/Unable-to-load-query-json-Error-Error-Message-Expecting-value/m-p/668034#M1322 <P>Hi,</P><P>I'm trying Splunk SOAR Community Edition, and I'm having an issue with the Elasticsearch app.</P><P>I'm attempting to configure the asset with my Elasticsearch instance. The test connectivity is good, but I can't poll incidents with "poll now." I encounter this type of error:</P><P><BR />Starting ingestion...<BR />If an ingestion is already in progress, this request will be queued and completed after that request completes.<BR />App 'Elasticsearch' started successfully (id: 1699519715123) on asset: 'elastic'(id: 4)<BR />Loaded action execution configuration<BR />Quering data for soar index<BR />Successfully added containers: 0, Successfully added artifacts: 0<BR />1 action failed Unable to load query json. Error: Error Message: Expecting value: line 1 column 1 (char 0)</P><P><BR />However, when I use an action in a playbook with the command "run query," I can see data.</P><P>Has anyone ever encountered this error ?</P> Thu, 09 Nov 2023 09:16:14 GMT squirrel38 2023-11-09T09:16:14Z Unable to load query json. Error: Error Message: Expecting value: line 1 column 1 (char 0) https://community.splunk.com/t5/Splunk-SOAR/Unable-to-load-query-json-Error-Error-Message-Expecting-value/m-p/668034#M1322 <P>Hi,</P><P>I'm trying Splunk SOAR Community Edition, and I'm having an issue with the Elasticsearch app.</P><P>I'm attempting to configure the asset with my Elasticsearch instance. The test connectivity is good, but I can't poll incidents with "poll now." I encounter this type of error:</P><P><BR />Starting ingestion...<BR />If an ingestion is already in progress, this request will be queued and completed after that request completes.<BR />App 'Elasticsearch' started successfully (id: 1699519715123) on asset: 'elastic'(id: 4)<BR />Loaded action execution configuration<BR />Quering data for soar index<BR />Successfully added containers: 0, Successfully added artifacts: 0<BR />1 action failed Unable to load query json. Error: Error Message: Expecting value: line 1 column 1 (char 0)</P><P><BR />However, when I use an action in a playbook with the command "run query," I can see data.</P><P>Has anyone ever encountered this error ?</P> Thu, 09 Nov 2023 09:16:14 GMT https://community.splunk.com/t5/Splunk-SOAR/Unable-to-load-query-json-Error-Error-Message-Expecting-value/m-p/668034#M1322 squirrel38 2023-11-09T09:16:14Z