Invalid key in stanza [default] (value: light)

[fhetterscheid]

After installing i get this error.

Checking: /opt/splunk/etc/apps/force_directed_viz/default/savedsearches.conf
Invalid key in stanza [default] in /opt/splunk/etc/apps/force_directed_viz/default/savedsearches.conf, line 2: display.visualizations.custom.force_directed_viz.force_directed.theme (value: light).

[dperre_splunk]

Hey fhetterscheid. I have pushed a change to the latest release of Force Directed App. It will be fixed in version 2.0.1.

The fix was to delete the savedsearches.conf as I have already created defaults in code for the visualizations so the configuration was superfluous. Hope this helps. 🙂

[guilmxm]

Hello !

The fix was not to delete the savedsearches.conf but the creation of README/savedsearches.conf.spec:

cat force_directed_viz/README/savedsearches.conf.spec

# Declare properties here
# <int>, <string>, <float>
display.visualizations.custom.force_directed_viz.force_directed.theme = <string>

Which fixes the error at splunkd start.

Many thanks

Guilhem

[andsov]

Thanks Guilhem, that worked 🙂

Had this problem with the Status Indicator app.

[devbus]

I can confirm that the proper solution is the one provided by Guilhem.
$SPLUNK_HOME/bin/splunk cmd btool check no more shows errors.

Thanks.

François

[amiftah]

Can you show the first lines of you [default] stanza in your /opt/splunk/etc/apps/force_directed_viz/default/savedsearches.conf?

Check this answer: https://answers.splunk.com/answers/435046/custom-cluster-map-visualization-why-am-i-getting.html, it may help..