https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225910#M188306 <P>I also voted for your answer because it helped me when I was building the dashboards. Thank you very much. </P> Mon, 23 Jan 2017 20:44:56 GMT jrballesteros05 2017-01-23T20:44:56Z https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225905#M188301 <P>Here is the case:</P> <P>I've build a dashboard with 6 graphs/tables all using the same base search. It works like a charm on a single SH (where I've developed the app). After pushing it to our SH cluster, however, the dashboard crashes when loading more than a few days data, with the error "An error occurred while fetching data" in several or all graphs (it seems kind of random).</P> <P>It starts loading normally, but then halfway "hangs" and shows the error mentioned above. It only does this when loading &gt; 6 days data, which is (only) 46.555 events with a bundle size of 4,2 MB. With slightly less events all works well. The search log shows no errors at all (it even reports a successful completion), and only one warning at the start of the search.log that seems unrelated:</P> <PRE><CODE>WARN DistributedInfoSingleton - Failed to read symptoms of peer=SH02 </CODE></PRE> <P>The splunkd.log also shows nothing related. </P> <P>Anyone an idea what's wrong? Or a tip on where to start troubleshooting?</P> Thu, 23 Jun 2016 09:42:28 GMT https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225905#M188301 dkoops 2016-06-23T09:42:28Z https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225906#M188302 <P>I had a similar issue with the same error message and found it to be related to the length of the postprocess search. You can test by moving more of the search into the base search or creating a macro to hold the postprocess search contents. Good luck.</P> Tue, 01 Nov 2016 16:08:13 GMT https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225906#M188302 tdime 2016-11-01T16:08:13Z https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225907#M188303 <P>Hello, in my case is a bit different, I only have the problem with a non-admin user with a custom role. If I run my dashboards as admin it runs perfectly. </P> <P>Do you know what is going on there?</P> Mon, 23 Jan 2017 19:46:57 GMT https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225907#M188303 jrballesteros05 2017-01-23T19:46:57Z https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225908#M188304 <P>are you sure the user has access to the indexes or can you view the search run which converts the tokens to values and copy/paste that in another splunk search running as your custom user?</P> Mon, 23 Jan 2017 20:13:24 GMT https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225908#M188304 tdime 2017-01-23T20:13:24Z https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225909#M188305 <P>Hi, I am completely sure. I was trying with Opera browser and I had the problem I mentioned before but when I try with Firefox and Chrome it works perfectly. I read the Splunk doc and I've just realised that Opera is not listed in the supported browsers by Splunk.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.5.1/Installation/Systemrequirements">http://docs.splunk.com/Documentation/Splunk/6.5.1/Installation/Systemrequirements</A></P> Mon, 23 Jan 2017 20:21:43 GMT https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225909#M188305 jrballesteros05 2017-01-23T20:21:43Z https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225910#M188306 <P>I also voted for your answer because it helped me when I was building the dashboards. Thank you very much. </P> Mon, 23 Jan 2017 20:44:56 GMT https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225910#M188306 jrballesteros05 2017-01-23T20:44:56Z https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225911#M188307 <P>It has been a while since I reported the issue, but it indeed seemed to have something to do with the base search. After moving some query stuff around in the dashboard xml it worken again at some point (unfortunately I'm unable to recall exactly what I did). </P> <P>Another detail is that I was also using Opera browser at that point. Never occured to me that the browser might have been the issue, but it's a good thing to keep in mind for possible future troubleshooting. I cannot validate this anymore, but it might be helpful to add.</P> <P>I will close this question, thx all.</P> Tue, 24 Jan 2017 08:47:08 GMT https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225911#M188307 dkoops 2017-01-24T08:47:08Z https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225912#M188308 <P>maybe the disk quota if you see the error for specific user roles.</P> Mon, 30 Sep 2019 12:00:22 GMT https://community.splunk.com/t5/Splunk-Search/quot-An-error-occurred-while-fetching-data-quot-using-a-base/m-p/225912#M188308 tmurata_splunk 2019-09-30T12:00:22Z