Dashboards & Visualizations

Creating a dashboard with text inputs and drop-down forms in Splunk 6.2.4, why am I getting error "Duplicate labels causing conflict"?

edroche3rd
Explorer

Good evening everyone!

I am trying to create a keystore dashboard with a handful of text inputs and a handfulof drop-down boxes. I am running version 6.2.4 Enterprise. I am getting "Duplicate labels causing conflict" error on the dashboard panel and under the field editor. I have tried changing every setting for the field to something different and that didn't work. I have attached an image file with screen prints with my settings and xml code.

Any thoughts? I have read the 2 below posts but no luck.alt text

http://answers.splunk.com/answers/221599/duplicate-labels-causing-conflict.html and

http://answers.splunk.com/answers/240661/receiving-a-duplicate-labels-causing-conflict-erro.html?utm...

1 Solution

MuS
Legend

Hi edroche3rd,

I had the same problem and solved by adding a dedup to the population search. Adapted to your drop down try something like this:

| inputlookup belts.csv | dedup level | table level

Hope this helps ...

cheers, MuS

View solution in original post

MuS
Legend

Hi edroche3rd,

I had the same problem and solved by adding a dedup to the population search. Adapted to your drop down try something like this:

| inputlookup belts.csv | dedup level | table level

Hope this helps ...

cheers, MuS

splunksurekha
Path Finder

am using this below query but still facing the same issue Duplicate labels causing conflict
| inputlookup alertreport | search AlertName!=NULL |dedup AlertName| table AlertName

0 Karma

MuS
Legend

Would you be able to post your alertreport lookup file?

0 Karma

edroche3rd
Explorer

Thanks MuS....Thank worked perfect!

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...