Splunk Search

Splunk Mobile Access Server - No search query provided error when accessing dashboards

TritonDrew
Engager

Splunk 6.2 installed and everything is working great. Installed the Mobile Access server and I can't view any dashboards, even simple ones. Reports work fine and the 6.x examples work with no problems. Getting a "No search query provided". Funny thing is when I export to a PDF from that dashboard the data looks good. Any ideas?

1 Solution

TritonDrew
Engager

Found out the problem. Inline search was creating search queries with a format the Mobile Access Server didn't recognize. Used to replace inline search and it works. SimpleXML issue?

View solution in original post

0 Karma

swasserroth
Path Finder

I have run into the same problem: all dashboards I have created resulted in "No search query provided".

After installing the "Dashboard Examples" I probably found the difference between these dashboards and the dashboards created in Splunk 6.2.1 by looking at the XML code differences:
- Splunk-created dashboards contain the query strings inside a <query> markup,
- the dashboard examples (i.e. "chart") are using the <searchString> markup.

After manual conversion of the XML code of Splunk-created dashboards to a format identical to the "chart" example, the dashboard worked on the iPad as expected.

It seems not to be an issue of using inline searches or not...

TritonDrew
Engager

Found out the problem. Inline search was creating search queries with a format the Mobile Access Server didn't recognize. Used to replace inline search and it works. SimpleXML issue?

0 Karma

andrewsb
New Member

What did you use to replace the inline searches? This is driving me nuts as well...

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

    Thursday, June 25, 2026  |  11AM PDT / 2PM EDT  Duration: 1 Hour (Includes live Q&A) Register to ...

Analytics Workspace deprecation

As of Splunk Cloud Platform 10.4.2604 and Splunk Enterprise 10.4, Analytics Workspace is now deprecated. ...

Splunk Developer Day Recap: Building, Publishing, and Growing on the Splunk Platform

Splunk Developer Day brought the Splunk developer community together for a practical look at what it means to ...