Security

500 Internal Server "TypeError: 'NoneType' object is unsubscriptable" Error

mallem
Path Finder

I pushed a group of saved searches to a newly built v4.1.4 indexer from a v4.1.4 deployment head. The .bundle files end up in the /opt/splunk/var/run/[servername] directory on the target indexer and seem to be running fine on their 2-minute schedules. The problem I have is when I go to Manager --> Searches and Reports, and click on the "Run" link located to the far right of the saved searches. When clicking that link, I get the 500 Internal Server Error TypeError: 'NoneType' object is unsubscriptable message. Scoured Splunk.com for any info on what app.conf changes can be made, but came up with nothing.

0 Karma

mallem
Path Finder

There's no "debugging info" link. Below is the contents of everything on the screen at the time of the error.

500 Internal Server Error TypeError: 'NoneType' object is unsubscriptable

This page was linked to from https://splunkserver3.webum.net/en-US/manager/search/saved/searches.

You are using splunkserver3.webum.net, which is connected to splunkd @82143 at https://127.0.0.1:8089 on Mon Nov 29 08:38:36 2010.

0 Karma

sideview
SplunkTrust
SplunkTrust

There should be a 'debugging info' link or something on that 500 page. Or failing that a stack trace which should show up in the web_service log in index=_internal. Can you paste in the info from either of those?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...