https://community.splunk.com/t5/Splunk-Search/Why-is-search-syntax-highlighting-not-working-in-Splunk-6-5-2/m-p/367871#M108450 <P>Our search heads syntax highlighting does not function for any of search commands. This is with search_syntax_highlighting = true for the user prefs. I'm on Splunk version 6.5.2.</P> <P><EM>[general]<BR /> search_syntax_highlighting = 1<BR /> search_assistant = compact<BR /> infodelivery_enabled = 0<BR /> infodelivery_show_ad_modal = 1<BR /> infodelivery_show_configure_modal = 1<BR /> datasets:showInstallDialog = 1</EM> </P> <P>What I do see if I look at the browser console output is this:</P> <P><EM>Uncaught TypeError: Cannot read property 'forEach' of undefined<BR /> at SPLHighlightRules.buildCommandTokens (<A href="https://mysearchhead:8000/en-US/static/@67571ef4b87d/js/contrib/ace-editor/mode-spl.js:20:27" target="_blank">https://mysearchhead:8000/en-US/static/@67571ef4b87d/js/contrib/ace-editor/mode-spl.js:20:27</A>)<BR /> at SPLHighlightRules.buildRules (<A href="https://mysearchhead:8000/en-US/static/@67571ef4b87d/js/contrib/ace-editor/mode-spl.js:82:76" target="_blank">https://mysearchhead:8000/en-US/static/@67571ef4b87d/js/contrib/ace-editor/mode-spl.js:82:76</A>)<BR /> at new SPLHighlightRules (<A href="https://mysearchhead:8000/en-US/static/@67571ef4b87d/js/contrib/ace-editor/mode-spl.js:339:10" target="_blank">https://mysearchhead:8000/en-US/static/@67571ef4b87d/js/contrib/ace-editor/mode-spl.js:339:10</A>)<BR /> ... SNIP ...<BR /> at _require (eval at module.exports (<A href="https://mysearchhead:8000/en-US/static/@A0893C21C54BF1F3227A8F08%E2%80%A62162F01813C1C30FC75598EC33A535BB92086/build/pages/enterprise/common.js:1:1" target="_blank">https://mysearchhead:8000/en-US/static/@A0893C21C54BF1F3227A8F08…2162F01813C1C30FC75598EC33A535BB92086/build/pages/enterprise/common.js:1:1</A>), :88:37)<BR /> at req (eval at module.exports (<A href="https://mysearchhead:8000/en-US/static/@A0893C21C54BF1F3227A8F08%E2%80%A62162F01813C1C30FC75598EC33A535BB92086/build/pages/enterprise/common.js:1:1" target="_blank">https://mysearchhead:8000/en-US/static/@A0893C21C54BF1F3227A8F08…2162F01813C1C30FC75598EC33A535BB92086/build/pages/enterprise/common.js:1:1</A>), :138:24)</EM> </P> <P><IMG src="https://community.splunk.com/storage/temp/190177-456780-nohighlighting.png" alt="alt text" /></P> Tue, 29 Sep 2020 13:18:50 GMT sylim_splunk 2020-09-29T13:18:50Z https://community.splunk.com/t5/Splunk-Search/Why-is-search-syntax-highlighting-not-working-in-Splunk-6-5-2/m-p/367871#M108450 <P>Our search heads syntax highlighting does not function for any of search commands. This is with search_syntax_highlighting = true for the user prefs. I'm on Splunk version 6.5.2.</P> <P><EM>[general]<BR /> search_syntax_highlighting = 1<BR /> search_assistant = compact<BR /> infodelivery_enabled = 0<BR /> infodelivery_show_ad_modal = 1<BR /> infodelivery_show_configure_modal = 1<BR /> datasets:showInstallDialog = 1</EM> </P> <P>What I do see if I look at the browser console output is this:</P> <P><EM>Uncaught TypeError: Cannot read property 'forEach' of undefined<BR /> at SPLHighlightRules.buildCommandTokens (<A href="https://mysearchhead:8000/en-US/static/@67571ef4b87d/js/contrib/ace-editor/mode-spl.js:20:27" target="_blank">https://mysearchhead:8000/en-US/static/@67571ef4b87d/js/contrib/ace-editor/mode-spl.js:20:27</A>)<BR /> at SPLHighlightRules.buildRules (<A href="https://mysearchhead:8000/en-US/static/@67571ef4b87d/js/contrib/ace-editor/mode-spl.js:82:76" target="_blank">https://mysearchhead:8000/en-US/static/@67571ef4b87d/js/contrib/ace-editor/mode-spl.js:82:76</A>)<BR /> at new SPLHighlightRules (<A href="https://mysearchhead:8000/en-US/static/@67571ef4b87d/js/contrib/ace-editor/mode-spl.js:339:10" target="_blank">https://mysearchhead:8000/en-US/static/@67571ef4b87d/js/contrib/ace-editor/mode-spl.js:339:10</A>)<BR /> ... SNIP ...<BR /> at _require (eval at module.exports (<A href="https://mysearchhead:8000/en-US/static/@A0893C21C54BF1F3227A8F08%E2%80%A62162F01813C1C30FC75598EC33A535BB92086/build/pages/enterprise/common.js:1:1" target="_blank">https://mysearchhead:8000/en-US/static/@A0893C21C54BF1F3227A8F08…2162F01813C1C30FC75598EC33A535BB92086/build/pages/enterprise/common.js:1:1</A>), :88:37)<BR /> at req (eval at module.exports (<A href="https://mysearchhead:8000/en-US/static/@A0893C21C54BF1F3227A8F08%E2%80%A62162F01813C1C30FC75598EC33A535BB92086/build/pages/enterprise/common.js:1:1" target="_blank">https://mysearchhead:8000/en-US/static/@A0893C21C54BF1F3227A8F08…2162F01813C1C30FC75598EC33A535BB92086/build/pages/enterprise/common.js:1:1</A>), :138:24)</EM> </P> <P><IMG src="https://community.splunk.com/storage/temp/190177-456780-nohighlighting.png" alt="alt text" /></P> Tue, 29 Sep 2020 13:18:50 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-search-syntax-highlighting-not-working-in-Splunk-6-5-2/m-p/367871#M108450 sylim_splunk 2020-09-29T13:18:50Z https://community.splunk.com/t5/Splunk-Search/Why-is-search-syntax-highlighting-not-working-in-Splunk-6-5-2/m-p/367872#M108451 <P>This case turned out to be caused by malformatted searchbnf.conf in a few custom apps, like it lacks mandatory field of "SYNTAX". - If you have the same issue I would recommend you to check if you have custom searchbnf.conf - Strangely, the small mistakes affect the whole feature to stop working which will be improved in the next version of 6.5.4 onward - it would ignore and work around the mistakes and continue to work for the other good commands.</P> Mon, 20 Mar 2017 22:19:33 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-search-syntax-highlighting-not-working-in-Splunk-6-5-2/m-p/367872#M108451 sylim_splunk 2017-03-20T22:19:33Z