topic Re: Dashboard panels showing "In handler 'savedsearch': Error while dispatching search" in Reporting

Dashboard panels showing "In handler 'savedsearch': Error while dispatching search"

shaun_dyble — Thu, 18 Dec 2014 06:17:58 GMT

Since upgrading to v6.1.4 some (not all) panels on a certain dashboard show an error "In handler 'savedsearch': Error while dispatching search".

I have found this solution, and changing the search to an inline search does get rid of the error. But Id rather find out the reason why its doing this now.

Has anyone else had panels using saved searches do this?

Thanks

Shaun

Re: Dashboard panels showing "In handler 'savedsearch': Error while dispatching search"

the_wolverine — Sat, 20 Dec 2014 00:22:03 GMT

Yes, happening here as well with 6.0.5. Would like to know the reason why.

Re: Dashboard panels showing "In handler 'savedsearch': Error while dispatching search"

the_wolverine — Wed, 07 Jan 2015 20:19:25 GMT

This is occurring with our Simple XML dashboards. A bug is open with Splunk on it and we are waiting on Splunk DEV to figure it out. Try converting to Advanced XML as a workaround. It worked for us.

Re: Dashboard panels showing "In handler 'savedsearch': Error while dispatching search"

arichman — Wed, 07 Jan 2015 22:57:42 GMT

I am getting this same error when I try to save a report that features a macro in its query.

Re: Dashboard panels showing "In handler 'savedsearch': Error while dispatching search"

shaun_dyble — Wed, 07 Jan 2015 23:22:58 GMT

I have confirmed with Splunk support that defect SPL-81881 has been raised for this and is currently an issue for all versions of 6.1

Re: Dashboard panels showing "In handler 'savedsearch': Error while dispatching search"

the_wolverine — Wed, 07 Jan 2015 23:25:02 GMT

According to known issues SPL-81881 is due to concurrency issues (searches being queued) or real-time search neither which was the case for us because the workaround was simply not to use Simple XML.

"In handler 'savedsearch': Error while dispatching search" may display due to searches being queued or could not run real time due to concurrency limits (SPL-81881)

Re: Dashboard panels showing "In handler 'savedsearch': Error while dispatching search"

cafissimo — Tue, 14 Apr 2015 08:56:19 GMT

Any news about this issue?

Thanks.

Re: Dashboard panels showing "In handler 'savedsearch': Error while dispatching search"

iststeam — Thu, 07 Apr 2016 09:41:46 GMT

In my case, this problem was solved by change the permission setting. I'm not sure does it can apply to your situation.