All Apps and Add-ons

Splunk App for AWS: How do I resolve error "The search specifies a macro 'aws-description-instance' that cannot be found"?

sankar74
Explorer

How do I resolve I following error?

Error in 'SearchParser': The search specifies a macro 'aws-description-instance' that cannot be found. Reasons include: the macro name is misspelled, you do not have "read" permission for the macro, or the macro has not been shared with this application. Click Settings, Advanced search, Search Macros to view macro information
1 Solution

czhang_splunk
Splunk Employee
Splunk Employee

Hi Sankar74,

The Overview page has been updated on Splunk App for AWS - 4.1.1, which removed the usage of macro aws-description-instance.

I guess you have edited the Overview page when you have App 4.0.0 installed, is that correct? In that case there will be a copy of old Overview page under APP FOLDER/local/data/ui/views/overview.xml. You can make a copy of your old overview.xml and delete it. Then you will be available to view the latest Overview page.

Let me know if this solves your problem. Thanks!

View solution in original post

czhang_splunk
Splunk Employee
Splunk Employee

Hi Sankar74,

The Overview page has been updated on Splunk App for AWS - 4.1.1, which removed the usage of macro aws-description-instance.

I guess you have edited the Overview page when you have App 4.0.0 installed, is that correct? In that case there will be a copy of old Overview page under APP FOLDER/local/data/ui/views/overview.xml. You can make a copy of your old overview.xml and delete it. Then you will be available to view the latest Overview page.

Let me know if this solves your problem. Thanks!

chwang_splunk
Splunk Employee
Splunk Employee

Hi, Could you pls provide more information for this case? What's the scenario to get this error?

0 Karma

sankar74
Explorer

When i launch the Splunk App for AWS, the overview page use to show me multiple panels with data. One of the tab is Comupte Instances Panel and other one is Security. These two panels the data was showing the above mention errors. Looks like that macro "aws-description-instance" is missing which is used in that panels.

0 Karma

chwang_splunk
Splunk Employee
Splunk Employee

Could you pls list your App & Add-on's version? Thanks a lot.

0 Karma

kuljeetss
Explorer

I had the same issue with the app after upgrade. I followed these steps and it is working fine now. Thanks chwang 🙂

0 Karma

sankar74
Explorer

Splunk App for AWS - 4.1.1
Splunk Addon for AWS - 3.0.0

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Using the Splunk Threat Research Team’s Latest Security Content

REGISTER HERE Tech Talk | Security Edition Did you know the Splunk Threat Research Team regularly releases ...

SplunkTrust | 2024 SplunkTrust Application Period is Open!

It's that time again, folks! That's right, the application/nomination period for the 2024 SplunkTrust is ...