https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30841#M6321 <P>fixed in latest version 5.0.5 (or 5.0.4.1 :-))</P> Tue, 08 Oct 2013 03:26:56 GMT the_wolverine 2013-10-08T03:26:56Z https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30834#M6314 <P>Customer reportsthat thet are running a search via the GUI. After displaying the results, they are seeing problems with the field list.</P> <P>Search reports 114 interesting fields which display OK<BR /> When they select "View all 295 fields" the error "No fields to display for this search." is displayed<BR /> They have tried changing mode option via the "bunny" button, but problem still exists.</P> Mon, 12 Nov 2012 14:24:42 GMT https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30834#M6314 dshakespeare_sp 2012-11-12T14:24:42Z https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30835#M6315 <P>Looking at web_service.log, an error in the format is seen</P> <P>FieldPicker:60 - Could not load summary PCDATA invalid Char value <X>, line <X>, column <X>.</X></X></X></P> <P>Splunk are investigating a possible issue in Splunk 5.0 with parsing some unicode characters (or corrupt binary characters which may need escaping) (SPL-58178)</P> Mon, 12 Nov 2012 14:32:39 GMT https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30835#M6315 dshakespeare_sp 2012-11-12T14:32:39Z https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30836#M6316 <P>same issue here. 5.0.1, opened case. </P> Thu, 06 Dec 2012 20:32:38 GMT https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30836#M6316 mayler 2012-12-06T20:32:38Z https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30837#M6317 <P>[<STRONG>version 5.0.1</STRONG>]</P> <P>For us the issue was with embedded commas in a CSV LOOKUP Table</P> <P>e.g.</P> <P>--</P> <P>Lookup,ReturnedValue</P> <P>123,Hello World</P> <P>456,"Hello Boston, London, and Toronto"</P> <P>--</P> <P>Remove the embedded commas and your good</P> <P>e.g.</P> <P>--</P> <P>Lookup,ReturnedValue</P> <P>123,Hello World</P> <P>456,Hello Boston and London and Toronto</P> <P>--</P> <P>.. issue is resolved</P> <P>Looks there is an issue with embedded commas (or the method for having them in lookup tables in Splunk is not the same as the CSV standard?)</P> <P>hth</P> <P>-tom</P> Sat, 02 Feb 2013 15:53:53 GMT https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30837#M6317 t9445 2013-02-02T15:53:53Z https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30838#M6318 <P>This is also problem in our newly updated 5.0.3 instance. Any update from support?</P> Thu, 01 Aug 2013 20:05:32 GMT https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30838#M6318 the_wolverine 2013-08-01T20:05:32Z https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30839#M6319 <P>Was any fix provided for this?</P> Thu, 01 Aug 2013 20:05:49 GMT https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30839#M6319 the_wolverine 2013-08-01T20:05:49Z https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30840#M6320 <P>Here's to hoping this is fixed in 6?</P> Mon, 07 Oct 2013 17:32:42 GMT https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30840#M6320 jjensenyahoo 2013-10-07T17:32:42Z https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30841#M6321 <P>fixed in latest version 5.0.5 (or 5.0.4.1 :-))</P> Tue, 08 Oct 2013 03:26:56 GMT https://community.splunk.com/t5/Splunk-Search/No-fields-to-display-for-this-search-in-GUI/m-p/30841#M6321 the_wolverine 2013-10-08T03:26:56Z