After installing i get this error.
Invalid key in stanza [default] in /opt/splunk/etc/apps/force_directed_viz/default/savedsearches.conf, line 2: display.visualizations.custom.force_directed_viz.force_directed.theme (value: light).
Hey fhetterscheid. I have pushed a change to the latest release of Force Directed App. It will be fixed in version 2.0.1.
The fix was to delete the savedsearches.conf as I have already created defaults in code for the visualizations so the configuration was superfluous. Hope this helps. 🙂
The fix was not to delete the savedsearches.conf but the creation of README/savedsearches.conf.spec:
cat force_directed_viz/README/savedsearches.conf.spec # Declare properties here # <int>, <string>, <float> display.visualizations.custom.force_directed_viz.force_directed.theme = <string>
Which fixes the error at splunkd start.
Can you show the first lines of you
[default] stanza in your
Check this answer: https://answers.splunk.com/answers/435046/custom-cluster-map-visualization-why-am-i-getting.html, it may help..