Splunk Enterprise

Mismatched ']' ERROR in splunkd logs under component=SearchParser

anz999
Loves-to-Learn Lots

I'm seeing some mismatch error in splunkd logs every 30 mins, i couldn't find a way to get which saved search is causing the issue.Any idea how to find the cause of this error.

 

06-29-2020 06:31:16.821 -0400 ERROR SearchParser - Mismatched ']'.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust
Look for scheduler errors around the same time as the parser errors.
---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...