Splunk Enterprise

What does it mean when SPLUNK UI Requests tenantID when using SPL?

New Member


I write this message because i have an issue with SPLUNK UI and SPL search.

I'm a new developper and I am discovering SPLUNK UI framework.


Everyhting was fine until now. When i use raw data in the dashboard it works, but when i put a SPL as :


 search3 : {

         type: 'ds.search',

         options: {

            query: "index=\"phantom_container\" | dedup id | search severity = \"critical\" | stats count",

            queryParameters: {

             earliest: "-7d@d",

             latest: "now"

                  meta: {},




Splunk said that a TenantId is required.

I don't understand this issue.

Can you resolve it or give me a solution please ?  

Any help is welcomed

Labels (2)
0 Karma

New Member

Need help please, thank you

0 Karma

New Member


0 Karma
Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...