Monitoring Splunk

Troubleshooting Stanza entry not found for data-type 'time-specifier error

daniel333
Builder

All, 

I am seeing the following error on my Splunk server in the logs and I have not been able to figure out what it means? 

"11-17-2020 17:40:55.204 -0800 WARN SearchAssistant - recurseSyntax: Stanza entry not found for data-type 'time-specifier'"

Any idea what it's referring to? What config? 

Labels (2)
0 Karma

justinssi
Engager

Well it seems that it's an issue in Splunk 8.0.x.  SPL-170987.

I don't see it listed in Splunk 8.1 or higher so maybe it's fixed there (it's not listed in the fixed section though).

0 Karma

justinssi
Engager

Did you ever figure this out?  I'm noticing this on one of my test instances too.

0 Karma