Join the Conversation
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- Splunk Mobile Access Server - No search query prov...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk 6.2 installed and everything is working great. Installed the Mobile Access server and I can't view any dashboards, even simple ones. Reports work fine and the 6.x examples work with no problems. Getting a "No search query provided". Funny thing is when I export to a PDF from that dashboard the data looks good. Any ideas?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Found out the problem. Inline search was creating search queries with a format the Mobile Access Server didn't recognize. Used to replace inline search and it works. SimpleXML issue?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have run into the same problem: all dashboards I have created resulted in "No search query provided".
After installing the "Dashboard Examples" I probably found the difference between these dashboards and the dashboards created in Splunk 6.2.1 by looking at the XML code differences:
- Splunk-created dashboards contain the query strings inside a <query> markup,
- the dashboard examples (i.e. "chart") are using the <searchString> markup.
After manual conversion of the XML code of Splunk-created dashboards to a format identical to the "chart" example, the dashboard worked on the iPad as expected.
It seems not to be an issue of using inline searches or not...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Found out the problem. Inline search was creating search queries with a format the Mobile Access Server didn't recognize. Used to replace inline search and it works. SimpleXML issue?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What did you use to replace the inline searches? This is driving me nuts as well...
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas
What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)
Automating Threat Operations and Threat Hunting with Recorded Future
