Your entry was not saved. The following error was reported: SyntaxError: JSON Parse error: Unrecognized token '<‘.

[tristanmatthews]

Hi,

So I'm inheriting some splunk code that I'm going through and cleaning up. It contains:

rex field=source "/data/splunk/(?<key>.*)/"

The search runs fine, when I navigate to it in the browser, (bread crumbs: splunk > manager >> Searches and reports >> [the search name] ) and modify a completely unrelated part of the search and go to save it it kicks the error

Your entry was not saved. The following error was reported: SyntaxError: Unexpected token <.

I'm fairly sure it's not escaping <> inside of quotes properly, so I can't save my search. I can however create a new search that has the exact same text in it.

Thanks,
Tristan

[woodcock]

You are THE MAN!

[hexx]

Actually, @the_wolverine is THE LADY! 🙂

[woodcock]

I should have guessed by the fingernails but the beard threw me off!

[the_wolverine]

I'm also seeing several reports of this issue and in reviewing the query I see nothing wrong with it nor anything that was set unexpectedly.

[guilmxm]

Hi,

See (end of the article)

http://www.w3schools.com/xml/xml_syntax.asp

Replace special characters by xml entities:

< by &lt;
> by &gt;
& by &amp;

And so on.

[woodcock]

This is not the problem; this is a bug. See my answer.

[muebel]

whats the full search string?

[had1980]

Hello, I am having the same issue. Did you solve it?

Thanks.