How to resolve this Unknown SID Error?

[domino30]

I am Learning Splunk the hard way I think, but here are my questions: if I have been able to have logs forwarded and if I can generate information from my host which right now is just the instance that my Splunk is running on how can the error in the picture exist. Seems to me like if I'm getting any kind of data in I should be getting all the data in especially if its simple like running processes.

[gcusello · Accepted solution]

Hi @domino30,

in your panel's search there's a token without values, control it.

The message in the Job Inspector isn't relevant because the search is waiting for the missed value.

If you want an help, please share the full dashboards code.

Ciao.

Giuseppe

[gcusello]

Hi @domino30,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉