topic Re: Dashboard: "Open in Search" results in Error 500 in Dashboards & Visualizations

Dashboard: "Open in Search" results in Error 500

mkelderm — Thu, 24 Oct 2013 09:10:33 GMT

Our Dashboards are working fine, even the ones delivered by Splunk App Base (like S.O.S., License app). But If we click on "Open in Search", we get a browser error 500:

500 Internal Server Error

Return to Splunk home page
Exception: If you specify sid (job id), you cannot also specify q or s (saved search name).

You are using splunk.nl.rsg, which is connected to splunkd @182037 at https://127.0.0.1:8089 on Thu Oct 24 11:03:37 2013.

We are using: Splunk 6.0

Any idea if this is a config issue or worked-as-designed?

Marc

Re: Dashboard: "Open in Search" results in Error 500

mkelderm — Fri, 25 Oct 2013 14:35:15 GMT

I found the reason. Our application (dashboards) is an global app. When you click on the 'Open in Search" it expects the search app. The generated URL is based the application:

When click on "Open in Search", it generates an URL:

https://splunk.nl.rsg/en-GB/app/x-i-bridge-Dash-Trend-App/search

Which Should be:

https://splunk.nl.rsg/en-GB/app/search/search

Re: Dashboard: "Open in Search" results in Error 500

mkelderm — Fri, 25 Oct 2013 14:35:53 GMT

Anyone an idea to fix this URL?

Re: Dashboard: "Open in Search" results in Error 500

mkelderm — Thu, 31 Oct 2013 09:32:31 GMT

It is not an answer, but a finding

Re: Dashboard: "Open in Search" results in Error 500

melting — Thu, 31 Oct 2013 16:59:20 GMT

Default is that the search page is shared globally. Is this true in your case?

Re: Dashboard: "Open in Search" results in Error 500

mkelderm — Sat, 02 Nov 2013 11:49:03 GMT

Issue has to do with 'old' 5.0 non-compatible app. We removed all add-on apps, used the defaults application. Then the issue did not occur. Later on we added the latest 6.0 compatible apps.

Re: Dashboard: "Open in Search" results in Error 500

polamarasetti — Fri, 01 Aug 2014 14:39:09 GMT

even, i am also getting same error, but earlier it was working fine. i am using SPLUNK 6.0

Re: Dashboard: "Open in Search" results in Error 500

onthebay — Thu, 01 Jun 2017 12:58:41 GMT

We often get a similar issue when apps are invisible; replacing app name with search as above allows the search to run. Can you run a regular search in the app context?