can anyone help me with the issue I get from time to time on my dashboard built using splunk dashboard studio:
for some reason this error occurs only for maps
here's the query
| tstats count from datamodel=Cisco_Security.ASA_Dataset where index IN (add_on_builder_index, adoption_metrics, audit_summary, ba_test, cim_modactions, cisco_duo, cisco_etd, cisco_se, cisco_secure_fw, cisco_sfw_ftd_syslog, cisco_sma, cisco_sna, cisco_xdr, duo, encore, endpoint_summary, fw_syslog, history, ioc, main, mcd, mcd_syslog, new_index_for_endpoint, notable, notable_summary, resource_usage_test_index, risk, secure_malware_analytics, sequenced_events, summary, threat_activity, ubaroute, ueba, whois) ASA_Dataset.event_type_filter_options IN (*) ASA_Dataset.severity_level_filter_options IN (*) ASA_Dataset.src_ip IN (*) ASA_Dataset.direction="outbound" groupby ASA_Dataset.dest
| iplocation ASA_Dataset.dest
| rename Country as "featureId"
| stats count by featureId
| geom geo_countries featureIdField=featureId
| where isnotnull(geom)
after reloading the page the error disappears
Could you try clearing your browser cache, and telling us which version of Splunk you are using?
Also if you remake this panel in a fresh new dashboard, does it make the same error?
I use 9.3.2 version, but the issue triggers on the remote environment, not locally, and yes, I tried to clear the cache and open the page in a new tab, it doesnt help
If you make a new dashboard and then add this one choropleth panel, without adding anything else, then does the new dashboard and its single panel load without complaint?