Splunk Enterprise

Mismatched ']' ERROR in splunkd logs under component=SearchParser

Loves-to-Learn Lots

I'm seeing some mismatch error in splunkd logs every 30 mins, i couldn't find a way to get which saved search is causing the issue.Any idea how to find the cause of this error.


06-29-2020 06:31:16.821 -0400 ERROR SearchParser - Mismatched ']'.

Labels (1)
0 Karma

Look for scheduler errors around the same time as the parser errors.
If this reply helps you, an upvote would be appreciated.
0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!


Or Learn More in Our Blog >>