I created dashboard has two panels like below.
To display Panel2, I use the <done> ~ </done>
tag in the source of Panel1 like below.
<done><eval token="arg1">$job.resultCount$</eval></done>
However, editing the search in the panel1 on the UI editing screen will cause the <done> ~ </done>
tag to disappear.
Why is it happen?
Is there a workaround?
If anyone knows, it would be greatly appreciated if you could tell me.
This is a bug in Splunk. Any sections like done,finalized,progress,error are getting disappeared when edit through GUI. I have logged bug to Splunk under "SPL-147251".
This is a bug in Splunk. Any sections like done,finalized,progress,error are getting disappeared when edit through GUI. I have logged bug to Splunk under "SPL-147251".
Thank you for answering!
Do you mean that you reported a bug to Splunk? Or is it already registered as Known Issues?
Also, as a result of contacting support, etc., did you know that it was a bug?
yeah, I have reported it to Splunk and they have acknowledged it as bug . I 'll follow up on this bug.
Guys, This issue has been fixed in Enterprise 7.0.3
@agoyal thank you. I am having same issue. is there any workaround instead of updating to v7.0.3
(Actually, my second panel depends on token from first panel)
When I edited the search from source, the <done>
tag did not disappear.
Is this the only workaround?
I have also noticed this issue intermittently in 7.0. What version are you using? You can add a Bug tag to this question and if you have valid Splunk Entitlement you can reach out to Splunk Support.
I noticed this issue in ver 7.0 and 6.6.3.
Perhaps, I think that the corresponding department related to the web framework is not Splunk support.
So we need to wait for someone inside Splunk to mention about this issue.
It's been fixed in 7.0.3