All,
I am seeing the following error on my Splunk server in the logs and I have not been able to figure out what it means?
"11-17-2020 17:40:55.204 -0800 WARN SearchAssistant - recurseSyntax: Stanza entry not found for data-type 'time-specifier'"
Any idea what it's referring to? What config?
Well it seems that it's an issue in Splunk 8.0.x. SPL-170987.
I don't see it listed in Splunk 8.1 or higher so maybe it's fixed there (it's not listed in the fixed section though).
Did you ever figure this out? I'm noticing this on one of my test instances too.