I have a form that uses Sideview utils to populate 2 pulldowns. When I run this as admin it works perfectly. My initial thought was it must be permissions related. However, when I gave this other user admin permissions they still saw the same error. The error message is [SimpleResultsTable module] Server reported HTTP status=400 while getting mode=results <?xml version='1.0' encoding='UTF-8'?> Error in 'stats' command: The rename value is invalid. . When the pulldown finishes loading there are no results. I assume that is what is causing this error to appear. WIth out results in the pulldown the substitution should fail. What has me perplexed is why no results are being returned when the same query run by hand works. I have a similar set up on another page and it works correctly. The only difference between the two is this one returns 2 values with the initial search and then does post-processing in the pulldown. Here is the XML snippet: <view autoCancelInterval="90" isVisible="true" onunloadCancelJobs="true" template="dashboard.html" isSticky="False"> <label>Statistic Detail Search Form</label> <module name="AccountBar" layoutPanel="appHeader" /> <module name="AppBar" layoutPanel="appHeader" /> <module name="SideviewUtils" layoutPanel="appHeader" /> <module name="Message" layoutPanel="messaging"> <param name="filter">*</param> <param name="maxSize">2</param> <param name="clearOnJobDispatch">False</param> </module> <module name="HTML" layoutPanel="viewHeader"> <param name="html"><![CDATA[ <h1>Statistic Detail Search Form</h1> ]]></param> </module> <module name="Search" layoutPanel="panel_row2_col1" autoRun="True"> <param name="search">index="main" | stats count by ServiceName FullCounterName</param> <param name="earliest">-4h</param> <param name="latest">-5m</param> <module name="Pulldown" autoRun="False"> <param name="name">ServiceName</param> <param name="size">4</param> <param name="label">Service Name:</param> <param name="template">ServiceName="$value$"</param> <param name="separator">+OR+</param> <param name="postProcess">dedup $name$ | sort $name$</param> <param name="outerTemplate">( $value$ )</param> <param name="searchFieldsToDisplay"> <list> <param name="label">ServiceName</param> <param name="value">ServiceName</param> </list> </param> <module name="Pulldown" layoutPanel="panel_row2_col1"> <param name="name">FullCounterName</param> <param name="staticFieldsToDisplay"></param> <param name="size">1</param> <param name="label">Counter Name:</param> <param name="template">$value$</param> <param name="postProcess"> dedup $name$ | sort $name$</param> <param name="searchFieldsToDisplay"> <list> <param name="label">FullCounterName</param> <param name="value">FullCounterName</param> </list> </param> <module name="Pulldown" layoutPanel="panel_row2_col1" > <param name="name">time_bucket</param> <param name="label">Time Bucket Size </param> <param name="staticFieldsToDisplay"> <list> <param name="label">30 Minutes</param> <param name="value">30m</param> </list> <list> <param name="label">60 Minutes</param> <param name="value">60m</param> </list> <list> <param name="label">90 Minutes</param> <param name="value">90m</param> </list> <list> <param name="label">3 hours</param> <param name="value">3h</param> </list> <list> <param name="label">6 Hours</param> <param name="value">6h</param> </list> <list> <param name="label">12 Hours</param> <param name="value">12h</param> </list> <list> <param name="label">24 Hours</param> <param name="value">24h</param> </list> </param> <module name="TimeRangePicker" layoutPanel="panel_row2_col1"> <param name="searchWhenChanged">True</param> <param name="selected">Last 4 hours</param> <param name="label">Time Frame:</param> <module name="Search" autoRun="False"> <param name="search">source="msmetrics socket" $ServiceName$ FullCounterName="$FullCounterName$"|bin _time span=$time_bucket$ | stats sum(CounterValue) as "$FullCounterName$" by _time ServiceName </param> <module name="JobProgressIndicator"></module> <module name="PostProcess"> <param name="search">timechart sum($FullCounterName$) as "$FullCounterName$" by ServiceName</param> <module name="HiddenChartFormatter"> <param name="chart">line</param> <param name="charting.chart.nullValueMode">connect</param> <param name="primaryAxisTitle.text">time</param> <param name="secondaryAxisTitle.text">Value</param> <param name="legend.placement">top</param> <module name="FlashChart"> <param name="width">100%</param> <param name="height">400px</param> </module> </module> </module> <module name="Pager"> <param name="entityName">results</param> <module name="SimpleResultsTable"> <param name="displayRowNumbers">True</param> <param name="entityName">results</param> <param name="count">30</param> </module> </module> </module> </module> </module> </module> </module> </module> </view> ... View more

I have many jobs scheduled to run on a regular basis in splunk, some every 30 minutes some every 5 minutes. Today, for no obvious reason, two of the jobs stopped running. I have tried unscheduling and rescheduling the jobs and even diasabling and re-enabling them. But still the time for the jobs comes and goes and no job is fired. If I look in the jobs list I see no records for these jobs. Has anyone seen this happen before? Is there somewhere I can look to see if the jobs are failing for some reason? thanks, Keith ... View more

I have search and post-process that is returning a data table. The post process adds column totals to the table. The problem is the totals are not showing up. It appears the issue is with the SimpleResultsTable it is only displaying 19 rows even though the count and maxLines values are set to 25. If I sort the table my count descending the totals show up at the top so it looks like the totals are generating, but you cannot see them when the dashboard loads because the SimpleResutlsTable is seemingly choosing and arbitrary number of rows to show. If I remove the count line the results returns to 10 rows as I would expect. So I am not sure it is only showing 19 rows when the count is set to 25. <module name="HiddenSavedSearch" layoutPanel="panel_row6_col1" autoRun='True'> <param name="savedSearch">7_day_summary</param> <param name="useHistory">True</param> <module name="HiddenPostProcess" layoutPanel="panel_row6_col1" group="Full Data"> <param name="search"> addcoltotals label=Totals labelfield=ServiceName|fields ServiceName PlayHours PlayErrorsTotal OtherErrors Tracks Search Browse Households | rename ServiceName as "Service Name"|rename PlayHours as "Play Hours" PlayErrorsTotal as "Play Errors" OtherErrors as "Other Errors" Households as "Unique Households"</param> <module name="JobProgressIndicator"/> <module name="SimpleResultsTable"> <param name="count">25</param> <param name="maxLines">25</param> <param name="drilldown">all</param> </module> <module name="ViewRedirectorLink"> <param name="viewTarget">flashtimeline</param> <param name="label">View Results</param> </module> </module> ... View more