Security

Unexpected query string parameters: form in Drilldown

snehal8
Path Finder

Hello All,

I am passing state variable to another form called CityName.

My drilldown is as follows:


/app/demoapp/CityName?form.Subscriber_State=$click.value$

My CityName Form:

index=myindex Subscriber_State="$Subscriber_State$" | table Subscriber_City

where Subscriber_State is variable.

When i click to my state its opening new tab and giving this error:

Unexpected query string parameters: form.Subscriber_State

Please can any one help me on this.

thank you

Tags (1)
0 Karma

badpianoman
Engager

I had this same error. I'm not sure if this will be the solution for you, but the URL I was being redirected to was not correct. I was using "Redirector" with SideViewUtils in the view "FirstTestView" and had specified the "Redirector" to go to the view "DifferentTestView" and received the "Unexpected query string parameters" error.

I was being sent to
/app/TestApp/FirstTestView/DifferentTestView?token=foo

This should have been
/app/TestApp/DifferentTestView?token=foo

I changed the "url" parameter for "Redirector" to be "..(backslash)DifferentTestView" and it went to the correct view.

To troubleshoot, you may want to go to the URL directly to ensure the issue is with the URL and then try and figure out the correct URL.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...