Splunk Enterprise Security

Cannot read properties of undefined (reading 'map')

Anit_Mathew
New Member

i having some issues to populate the traffic center dashboard in splunk ES. It's showing as "Cannot read properties of undefined (reading 'map')".

anyone have any solutions?

Screenshot 2025-02-13 124637.png

Labels (2)
0 Karma

livehybrid
Champion

Hi @Anit_Mathew 

Did you get to the bottom of this? 

This looks like the "Traffic Over Time By Protocol" panel which is broken? Which version of ES are you on?

In ES 7.3.2 the search it runs is something like this:

| `tstats` count from datamodel=Network_Traffic.All_Traffic where * by _time,All_Traffic.transport span=10m | timechart minspan=10m useother=`useother` count by All_Traffic.transport | `drop_dm_object_name("All_Traffic")`

Which doesnt look like it has a map command anywhere, unless you have altered any macros?

Please can you confirm the ES and CIM app versions you are using and if any changes have been made to the macros?

Please let me know how you get on and consider accepting this answer or adding karma this answer if it has helped.
Regards

Will

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@Anit_Mathew- If it is Splunk ES default dashboard without any change in it and if it is still giving you error you can raise Splunk support ticket for it.

 

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with Brett Adams

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative ...

Index This | What can you do to make 55,555 equal 500?

April 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...