Splunk Enterprise Security

issue with map cholopleth: cannot read properties of undefined (reading "version")

romanpro
Explorer

can anyone help me with the issue I get from time to time on my dashboard built using splunk dashboard studio:

romanpro_0-1732042016539.png

for some reason this error occurs only for maps
here's the query

| tstats count from datamodel=Cisco_Security.ASA_Dataset where index IN (add_on_builder_index, adoption_metrics, audit_summary, ba_test, cim_modactions, cisco_duo, cisco_etd, cisco_se, cisco_secure_fw, cisco_sfw_ftd_syslog, cisco_sma, cisco_sna, cisco_xdr, duo, encore, endpoint_summary, fw_syslog, history, ioc, main, mcd, mcd_syslog, new_index_for_endpoint, notable, notable_summary, resource_usage_test_index, risk, secure_malware_analytics, sequenced_events, summary, threat_activity, ubaroute, ueba, whois) ASA_Dataset.event_type_filter_options IN (*) ASA_Dataset.severity_level_filter_options IN (*) ASA_Dataset.src_ip IN (*) ASA_Dataset.direction="outbound" groupby ASA_Dataset.dest
| iplocation ASA_Dataset.dest
| rename Country as "featureId"
| stats count by featureId
| geom geo_countries featureIdField=featureId
| where isnotnull(geom)


after reloading the page the error disappears

romanpro_0-1732042246978.png

 

 

Labels (3)

marnall
Motivator

Could you try clearing your browser cache, and telling us which version of Splunk you are using?

Also if you remake this panel in a fresh new dashboard, does it make the same error? 

0 Karma

romanpro
Explorer

I use 9.3.2 version, but the issue triggers on the remote environment, not locally, and yes, I tried to clear the cache and open the page in a new tab, it doesnt help

0 Karma

marnall
Motivator

If you make a new dashboard and then add this one choropleth panel, without adding anything else, then does the new dashboard and its single panel load without complaint? 

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...