Server error below the search bar


Hi Splunkers,

Need you help to fix the below problem.

We recently migrated our standalone search head to the cluster search head and after that we started seeing server error. After running a search that returns results, if left for just a little bit, the message “Server Error” will pop up below the search bar. I suspect that this is related to the apache proxy ( our authentication method, Apache proxy that is sitting in front of the Splunk webserver) as well as I haven’t seen it happen when using the username/password auth method.

And I have seen similar issue posted but there it was a browser issue but in my case it is not related to browser issue as I have tried on all the browsers and I have faced the similar issues on all.

Thanks in advance,

0 Karma

Path Finder

Did you ever find a resolution for this error?  We're running v7.3.2,  search head cluster, indexer cluster.

It doesn't appear to affect the searches running, but multiple users are getting the "Server Error" message, usually after the job has finalized.


0 Karma


Hi thippeshaj,

Can you look for errors in the splunkd.log
Run the query below:
index=_internal log_level=ERROR and look for the errors.
That might help giving you a better insight.

0 Karma


Hi deepa,
I have tried all the basic troubleshooting, didn't workout.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...