Splunk Enterprise Security

issue with map cholopleth: cannot read properties of undefined (reading "version")

romanpro
Explorer

can anyone help me with the issue I get from time to time on my dashboard built using splunk dashboard studio:

romanpro_0-1732042016539.png

for some reason this error occurs only for maps
here's the query

| tstats count from datamodel=Cisco_Security.ASA_Dataset where index IN (add_on_builder_index, adoption_metrics, audit_summary, ba_test, cim_modactions, cisco_duo, cisco_etd, cisco_se, cisco_secure_fw, cisco_sfw_ftd_syslog, cisco_sma, cisco_sna, cisco_xdr, duo, encore, endpoint_summary, fw_syslog, history, ioc, main, mcd, mcd_syslog, new_index_for_endpoint, notable, notable_summary, resource_usage_test_index, risk, secure_malware_analytics, sequenced_events, summary, threat_activity, ubaroute, ueba, whois) ASA_Dataset.event_type_filter_options IN (*) ASA_Dataset.severity_level_filter_options IN (*) ASA_Dataset.src_ip IN (*) ASA_Dataset.direction="outbound" groupby ASA_Dataset.dest
| iplocation ASA_Dataset.dest
| rename Country as "featureId"
| stats count by featureId
| geom geo_countries featureIdField=featureId
| where isnotnull(geom)


after reloading the page the error disappears

romanpro_0-1732042246978.png

 

 

Labels (3)

marnall
Motivator

Could you try clearing your browser cache, and telling us which version of Splunk you are using?

Also if you remake this panel in a fresh new dashboard, does it make the same error? 

0 Karma

romanpro
Explorer

I use 9.3.2 version, but the issue triggers on the remote environment, not locally, and yes, I tried to clear the cache and open the page in a new tab, it doesnt help

0 Karma

marnall
Motivator

If you make a new dashboard and then add this one choropleth panel, without adding anything else, then does the new dashboard and its single panel load without complaint? 

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...