<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic unknown sid error after refreshing dashboard by clicking on F5 button in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/unknown-sid-error-after-refreshing-dashboard-by-clicking-on-F5/m-p/514873#M34412</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;i'm running this dashboard :&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;form&amp;gt;
  &amp;lt;label&amp;gt;LSAP&amp;lt;/label&amp;gt;
  &amp;lt;fieldset submitButton="true" autoRun="true"&amp;gt;
    &amp;lt;input type="text" token="lsap_token" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;lsap&amp;lt;/label&amp;gt;
      &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
      &amp;lt;change&amp;gt;
        &amp;lt;condition match="$lsap_token$ == &amp;amp;quot;BCG29&amp;amp;quot;"&amp;gt;
          &amp;lt;set token="limit_token"&amp;gt;""&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
        &amp;lt;condition match="$lsap_token$ == &amp;amp;quot;COL41&amp;amp;quot;"&amp;gt;
          &amp;lt;set token="limit_token"&amp;gt;"127.0.0.1 tomcat: Starting dataload"&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
      &amp;lt;/change&amp;gt;
    &amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;LSAP Dashboard&amp;lt;/title&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;index="prod" $lsap_token$ $limit_token$
| append
   [ search index="prod" sourcetype=flights
   | dedup Tail_no, Actual_time_departure
   | sort 0 -Actual_time_departure
   | streamstats last(Origin) as last_origin by Tail_no current=false
   | eval _time=strptime(Actual_time_arrival, "%Y-%m-%d %H:%M"), Destination=if(Destination=last_origin, Destination, "UNKNOWN")
   | rename Tail_no as tail_id]
| sort 0 _time
| streamstats latest(Destination) as airport by tail_id time_window=1mon
| search sourcetype!=flights
| fillnull value="UNKNOWN" airport
| fillnull value="unassigned" eventtype
| eval Date=strftime(_time, "%Y-%m-%d")
| table Date,tail_id,_raw, airport, eventtype
| sort tail_id, Date&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;20&amp;lt;/option&amp;gt;
        &amp;lt;option name="dataOverlayMode"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="percentagesRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="totalsRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="wrap"&amp;gt;true&amp;lt;/option&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;after refreshing the page with F5 button im getting "unknown sid" error.&lt;BR /&gt;it is not happening when im removing &lt;U&gt;$limit_token$&lt;/U&gt; from the search&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;any suggestions what is wrong ?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;thanks&lt;/P&gt;</description>
    <pubDate>Wed, 19 Aug 2020 08:41:31 GMT</pubDate>
    <dc:creator>sarit_s</dc:creator>
    <dc:date>2020-08-19T08:41:31Z</dc:date>
    <item>
      <title>unknown sid error after refreshing dashboard by clicking on F5 button</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/unknown-sid-error-after-refreshing-dashboard-by-clicking-on-F5/m-p/514873#M34412</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;i'm running this dashboard :&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;form&amp;gt;
  &amp;lt;label&amp;gt;LSAP&amp;lt;/label&amp;gt;
  &amp;lt;fieldset submitButton="true" autoRun="true"&amp;gt;
    &amp;lt;input type="text" token="lsap_token" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;lsap&amp;lt;/label&amp;gt;
      &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
      &amp;lt;change&amp;gt;
        &amp;lt;condition match="$lsap_token$ == &amp;amp;quot;BCG29&amp;amp;quot;"&amp;gt;
          &amp;lt;set token="limit_token"&amp;gt;""&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
        &amp;lt;condition match="$lsap_token$ == &amp;amp;quot;COL41&amp;amp;quot;"&amp;gt;
          &amp;lt;set token="limit_token"&amp;gt;"127.0.0.1 tomcat: Starting dataload"&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
      &amp;lt;/change&amp;gt;
    &amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;LSAP Dashboard&amp;lt;/title&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;index="prod" $lsap_token$ $limit_token$
| append
   [ search index="prod" sourcetype=flights
   | dedup Tail_no, Actual_time_departure
   | sort 0 -Actual_time_departure
   | streamstats last(Origin) as last_origin by Tail_no current=false
   | eval _time=strptime(Actual_time_arrival, "%Y-%m-%d %H:%M"), Destination=if(Destination=last_origin, Destination, "UNKNOWN")
   | rename Tail_no as tail_id]
| sort 0 _time
| streamstats latest(Destination) as airport by tail_id time_window=1mon
| search sourcetype!=flights
| fillnull value="UNKNOWN" airport
| fillnull value="unassigned" eventtype
| eval Date=strftime(_time, "%Y-%m-%d")
| table Date,tail_id,_raw, airport, eventtype
| sort tail_id, Date&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;20&amp;lt;/option&amp;gt;
        &amp;lt;option name="dataOverlayMode"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="percentagesRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="totalsRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="wrap"&amp;gt;true&amp;lt;/option&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;after refreshing the page with F5 button im getting "unknown sid" error.&lt;BR /&gt;it is not happening when im removing &lt;U&gt;$limit_token$&lt;/U&gt; from the search&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;any suggestions what is wrong ?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;thanks&lt;/P&gt;</description>
      <pubDate>Wed, 19 Aug 2020 08:41:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/unknown-sid-error-after-refreshing-dashboard-by-clicking-on-F5/m-p/514873#M34412</guid>
      <dc:creator>sarit_s</dc:creator>
      <dc:date>2020-08-19T08:41:31Z</dc:date>
    </item>
    <item>
      <title>Re: unknown sid error after refreshing dashboard by clicking on F5 button</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/unknown-sid-error-after-refreshing-dashboard-by-clicking-on-F5/m-p/516936#M34621</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/149978"&gt;@sarit_s&lt;/a&gt;&amp;nbsp;within an input &lt;STRONG&gt;&amp;lt;change&amp;gt;&lt;/STRONG&gt; event handler the selected value should be accessed via built-in predefined token &lt;STRONG&gt;$value$&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;Please retry after changing the token $lsap_token$ with $value$ in the condition block of change event handler of the input.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;    &amp;lt;input type="text" token="lsap_token" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;lsap&amp;lt;/label&amp;gt;
      &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
      &amp;lt;change&amp;gt;
        &amp;lt;condition match="$value$ == &amp;amp;quot;BCG29&amp;amp;quot;"&amp;gt;
          &amp;lt;set token="limit_token"&amp;gt;""&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
        &amp;lt;condition match="$value$ == &amp;amp;quot;COL41&amp;amp;quot;"&amp;gt;
          &amp;lt;set token="limit_token"&amp;gt;"127.0.0.1 tomcat: Starting dataload"&amp;lt;/set&amp;gt;
        &amp;lt;/condition&amp;gt;
      &amp;lt;/change&amp;gt;
    &amp;lt;/input&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;PS: If there are no condition match default value *, I dont understand setting that as the default value for the text box. Also if there are only two condition blocks you can use a dropdown or radio (unless you are sampling few for simplicity)&lt;/P&gt;</description>
      <pubDate>Sun, 30 Aug 2020 20:45:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/unknown-sid-error-after-refreshing-dashboard-by-clicking-on-F5/m-p/516936#M34621</guid>
      <dc:creator>niketn</dc:creator>
      <dc:date>2020-08-30T20:45:45Z</dc:date>
    </item>
  </channel>
</rss>

