Reporting

splunk failed to fetch form values for form "saved/searches"

dmillis
Splunk Employee
Splunk Employee

My 4.1.4 Splunk instance on MacOS 10.6.4 will no longer allow me to save searches, complaining with the error: 'splunk failed to fetch form values for form "saved/searches"'.

User is 'admin', and the following event from the _internal index seems to be tied to the problem:

2010-10-12 00:17:13,481 ERROR [4cb3fd690d1fa23f0] admin:835 - uiHelper processValueAdd operator failed for endpoint_path=saved/searches/_new elementName=spl-ctrl_summary_index: argument of type 'NoneType' is not iterable host=dmillis-mbp15.local sourcetype=splunk_web_service source=/Applications/splunk/var/log/splunk/web_service.log

I have an enterprise license.

Any ideas or suggestions?

Tags (2)
0 Karma

dmillis
Splunk Employee
Splunk Employee

I decided to reinstall 4.1.5, which solved the problem.

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...