Splunk Enterprise Security

issue with map cholopleth: cannot read properties of undefined (reading "version")

romanpro
Loves-to-Learn Everything

can anyone help me with the issue I get from time to time on my dashboard built using splunk dashboard studio:

romanpro_0-1732042016539.png

for some reason this error occurs only for maps
here's the query

| tstats count from datamodel=Cisco_Security.ASA_Dataset where index IN (add_on_builder_index, adoption_metrics, audit_summary, ba_test, cim_modactions, cisco_duo, cisco_etd, cisco_se, cisco_secure_fw, cisco_sfw_ftd_syslog, cisco_sma, cisco_sna, cisco_xdr, duo, encore, endpoint_summary, fw_syslog, history, ioc, main, mcd, mcd_syslog, new_index_for_endpoint, notable, notable_summary, resource_usage_test_index, risk, secure_malware_analytics, sequenced_events, summary, threat_activity, ubaroute, ueba, whois) ASA_Dataset.event_type_filter_options IN (*) ASA_Dataset.severity_level_filter_options IN (*) ASA_Dataset.src_ip IN (*) ASA_Dataset.direction="outbound" groupby ASA_Dataset.dest
| iplocation ASA_Dataset.dest
| rename Country as "featureId"
| stats count by featureId
| geom geo_countries featureIdField=featureId
| where isnotnull(geom)


after reloading the page the error disappears

romanpro_0-1732042246978.png

 

 

Labels (3)
0 Karma

marnall
Motivator

Could you try clearing your browser cache, and telling us which version of Splunk you are using?

Also if you remake this panel in a fresh new dashboard, does it make the same error? 

0 Karma

romanpro
Loves-to-Learn Everything

I use 9.3.2 version, but the issue triggers on the remote environment, not locally, and yes, I tried to clear the cache and open the page in a new tab, it doesnt help

0 Karma

marnall
Motivator

If you make a new dashboard and then add this one choropleth panel, without adding anything else, then does the new dashboard and its single panel load without complaint? 

0 Karma
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.


Introducing Unified TDIR with the New Enterprise Security 8.2

Read the blog
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...