https://community.splunk.com/t5/Reporting/why-do-i-get-an-Error-in-SearchParser-when-i-try-to-save-my/m-p/44813#M928 <P>When you save the search, are you selecting the option of sharing the search with others using the app? If yes, then the macros must also be shared. </P> <P>If the macros are private, then Splunk will give an error message if you try to save the search as a shared search.</P> <P>Try changing the permissions of the macros and then saving the search.</P> <P>(Or I could be wrong, but I think I remember having this problem myself.)</P> Fri, 24 May 2013 02:15:54 GMT lguinn2 2013-05-24T02:15:54Z https://community.splunk.com/t5/Reporting/why-do-i-get-an-Error-in-SearchParser-when-i-try-to-save-my/m-p/44812#M927 <P>i have a search that uses the following two macros, neither of which take arguments.</P> <P>exclude_URIs_docs<BR /> uri!="<EM>/images/</EM>" uri!="<EM>/skins</EM>" uri!="/extensions*" uri!="<EM>/themes</EM>" uri!="<EM>favicon</EM>" uri!="/DocumentationStatic*asset*" uri!="/DocumentationStatic*resources*" </P> <P>exclude_useragents_docs<BR /><BR /> useragent!="gsa*" useragent!="SplunkPinger*" useragent!=<EM>bot</EM></P> <P>the search runs fine, but when i try to save it, i get the following error:</P> <P>Error in 'SearchParser': Could not find macro 'exclude_URIs_docs' that takes 0 arguments. Expecting stanza name 'exclude_URIs_docs'.</P> <P>splunk hasn't been restarted since i created them, is this potentially the reason for the error? </P> Mon, 28 Sep 2020 13:58:14 GMT https://community.splunk.com/t5/Reporting/why-do-i-get-an-Error-in-SearchParser-when-i-try-to-save-my/m-p/44812#M927 piebob 2020-09-28T13:58:14Z https://community.splunk.com/t5/Reporting/why-do-i-get-an-Error-in-SearchParser-when-i-try-to-save-my/m-p/44813#M928 <P>When you save the search, are you selecting the option of sharing the search with others using the app? If yes, then the macros must also be shared. </P> <P>If the macros are private, then Splunk will give an error message if you try to save the search as a shared search.</P> <P>Try changing the permissions of the macros and then saving the search.</P> <P>(Or I could be wrong, but I think I remember having this problem myself.)</P> Fri, 24 May 2013 02:15:54 GMT https://community.splunk.com/t5/Reporting/why-do-i-get-an-Error-in-SearchParser-when-i-try-to-save-my/m-p/44813#M928 lguinn2 2013-05-24T02:15:54Z https://community.splunk.com/t5/Reporting/why-do-i-get-an-Error-in-SearchParser-when-i-try-to-save-my/m-p/44814#M929 <P>yeah, i had chosen to make the saved search public to users of my app's context, but when i created the macros, they were private by default. this is kind of lame, since there's no way to set the permissions of a given macro in the "add new macro" page while you're making it. however, you can change these from the Manager » Advanced search » Search macros list page.</P> Fri, 24 May 2013 03:20:16 GMT https://community.splunk.com/t5/Reporting/why-do-i-get-an-Error-in-SearchParser-when-i-try-to-save-my/m-p/44814#M929 piebob 2013-05-24T03:20:16Z https://community.splunk.com/t5/Reporting/why-do-i-get-an-Error-in-SearchParser-when-i-try-to-save-my/m-p/44815#M930 <P>Yes, and it is also a lame error message.</P> Fri, 24 May 2013 16:10:16 GMT https://community.splunk.com/t5/Reporting/why-do-i-get-an-Error-in-SearchParser-when-i-try-to-save-my/m-p/44815#M930 lguinn2 2013-05-24T16:10:16Z