https://community.splunk.com/t5/Splunk-Search/Host-list-on-default-search-shows-error-message-of/m-p/132654#M36220 <P>So my main search page in the bottom right hosts summary has the following error message listed:</P> <PRE><CODE>[SimpleResultsTable module] Input is not proper UTF-8, indicate encoding ! Bytes: 0xD8 0xCE 0x89 0xB9, line 12, column 142 </CODE></PRE> <P>If I click on the page numbers it brings up the other pages as per normal and I can sort by host name and look around. But go back to page 1 and this error message is still there(assuming I didn't change the sort).</P> <P>How can I find the undoubtedly garbled host name that is causing this without being able to see it?</P> Thu, 30 Jan 2014 22:22:54 GMT Pierceyuk 2014-01-30T22:22:54Z https://community.splunk.com/t5/Splunk-Search/Host-list-on-default-search-shows-error-message-of/m-p/132654#M36220 <P>So my main search page in the bottom right hosts summary has the following error message listed:</P> <PRE><CODE>[SimpleResultsTable module] Input is not proper UTF-8, indicate encoding ! Bytes: 0xD8 0xCE 0x89 0xB9, line 12, column 142 </CODE></PRE> <P>If I click on the page numbers it brings up the other pages as per normal and I can sort by host name and look around. But go back to page 1 and this error message is still there(assuming I didn't change the sort).</P> <P>How can I find the undoubtedly garbled host name that is causing this without being able to see it?</P> Thu, 30 Jan 2014 22:22:54 GMT https://community.splunk.com/t5/Splunk-Search/Host-list-on-default-search-shows-error-message-of/m-p/132654#M36220 Pierceyuk 2014-01-30T22:22:54Z https://community.splunk.com/t5/Splunk-Search/Host-list-on-default-search-shows-error-message-of/m-p/132655#M36221 <P>Splunk support helped me with this issue.<BR /> Their solution:<BR /> putty into server, navigate to where the splunk data is and run<BR /> find . -name Hosts.data |xargs grep --color='auto' -P -n "[\x80-\xFF]"</P> <P>this will return some of the junk host names you have e.g. in my case "host::#000#000#000#000#000#000#000#000#000#000#000#000#000#000#000#000#000#000#000#000#000#000#000#000!#000#000#000#000#000#000#000imudp#000#000#000?#013z#001#000#000#000#000 "</P> <P>I could search for this in the splunk GUI (host=#000*) but the data would never show, but the interesting fields would.<BR /> Then try adding |delete to get rid of this data and if your lucky you fix your issues.<BR /> I would recommend working with support, this was a nightmare that took a few weeks to get to the bottom of. </P> Thu, 06 Mar 2014 10:59:33 GMT https://community.splunk.com/t5/Splunk-Search/Host-list-on-default-search-shows-error-message-of/m-p/132655#M36221 Pierceyuk 2014-03-06T10:59:33Z