Splunk Enterprise
Highlighted

Mismatched ']' ERROR in splunkd logs under component=SearchParser

Loves-to-Learn Lots

I'm seeing some mismatch error in splunkd logs every 30 mins, i couldn't find a way to get which saved search is causing the issue.Any idea how to find the cause of this error.

 

06-29-2020 06:31:16.821 -0400 ERROR SearchParser - Mismatched ']'.

Labels (1)
0 Karma
Highlighted

Re: Mismatched ']' ERROR in splunkd logs under component=SearchParser

SplunkTrust
SplunkTrust
Look for scheduler errors around the same time as the parser errors.
---
If this reply helps you, an upvote would be appreciated.
0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.