topic Re: Misconfigured view error after upgrade to 4.2.3 in Splunk Search

Misconfigured view error after upgrade to 4.2.3

tasdienes — Mon, 28 Sep 2020 09:52:49 GMT

I upgraded from 4.2.2 to 4.2.3 (Windows). After the upgrade, this message appears in the top of my browser:

Misconfigured view 'search_ui_activity' - Unknown parameter 'suppressionList' is defined for module ViewstateAdapter. Make sure the parameter is specified in ViewstateAdapter.conf.

Anyone know what to do about that?

Re: Misconfigured view error after upgrade to 4.2.3

rroberts — Mon, 28 Sep 2020 09:52:54 GMT

Check your ViewstateAdapter.conf in $SPLUNK_HOME/share/splunk/search_mrsparkle/modules/results . Does it have a...

[param:suppressionList]

required = false

...stanza?

Re: Misconfigured view error after upgrade to 4.2.3

araitz — Mon, 12 Sep 2011 14:57:10 GMT

What view is this? Is this simple or advanced XML?

Re: Misconfigured view error after upgrade to 4.2.3

tasdienes — Tue, 13 Sep 2011 01:52:24 GMT

It did not. I added that, and the message went away. Thanks!

Re: Misconfigured view error after upgrade to 4.2.3

araitz — Tue, 13 Sep 2011 03:37:58 GMT

So was it simple or advanced XML? In other words, which view was this?

Re: Misconfigured view error after upgrade to 4.2.3

jdunlea_splunk — Wed, 12 Oct 2011 20:16:47 GMT

I did as you said, and added this stanza to the ViewstateAdapter.conf file, but even after restarting splunk i still get the error.

I am using advanced XML. Any ideas??

Re: Misconfigured view error after upgrade to 4.2.3

araitz — Wed, 12 Oct 2011 20:32:13 GMT

My guess is that this is a problem with how Simple XML converts to Advanced XML. If you add "&showsource=1" to the end of the URL, you can grab the converted advanced XML, paste it into a new view, remove the suppressionList param for ViewstateAdapter, and then see if the issue goes away.