Dashboards & Visualizations

What causes "Failed to locate job status for job" message to appear in a dashboard panel?

simpkins1958
Contributor

Splunk 7.0.2 running on Windows Server 2016. Trying to understand what would cause "Failed to locate job status for job" message to appear in a dashboard panel.

alt text

0 Karma

simpkins1958
Contributor

Here is the XML. It is using a base search.

    <panel>
      <single>
        <title>Total devices</title>
        <search base="devicesBaseSearch">
          <query>stats count</query>
        </search>
        <option name="drilldown">none</option>
      </single>
    </panel>

 <search id="devicesBaseSearch">
    <query>| tstats latest(_time) AS _time latest(nmds_device_info.d_name) AS d_name values(nmds_device_info.c_user) AS c_user latest(nmds_device_info.m_ver) AS m_ver latest(nmds_device_info.cliver) AS cliver values(nmds_device_info.phone) AS phone latest(nmds_device_info.plat) AS plat latest(nmds_device_info.osver) AS osver from datamodel=nmdm_device_info 
        groupby nmds_device_info.c_id
      | rename nmds_device_info.c_id AS c_id
      | fillnull plat c_user phone value=""
      | table _time d_name c_user m_ver cliver phone plat osver c_id
0 Karma

elliotproebstel
Champion

I'm not an expert in this, so this might not be the solution, but have you tried moving the base search higher in the file so that it's defined before the item post-processing it is called?

0 Karma

splunker12er
Motivator
   <single>
     <title>Total devices</title>
     <search base="devicesBaseSearch">
      <query>|stats count</query>
     </search>
     <option name="drilldown">none</option>
   </single>
 </panel>

did u missed a pipe symbol ? in your <query>

0 Karma

elliotproebstel
Champion

Can you share the XML code for that panel? Is it trying to load a report or use the loadjob command? Or is it using a base search and a post-processing search, maybe?

0 Karma

splunker12er
Motivator
0 Karma
Get Updates on the Splunk Community!

2024 Splunk Career Impact Survey | Earn a $20 gift card for participating!

Hear ye, hear ye! The time has come again for Splunk's annual Career Impact Survey!  We need your help by ...

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...