Why is dashboard XML failing parsing check when splunk is restarted?

[vishaloptulink]

Hi,

I have a dashboard built from a search. The search contains range check for a value.
Search:

    | inputlookup datalookup
    | table TIMESTAMP COMMAND RESULT UTILIZATION
    | search LATITUDE>=$sbound$ LATITUDE<$nbound$ LONGITUDE>=$wbound$ LONGITUDE<$ebound$

This search works without any issues in the Search App, but when I include this in a dashboard and restart splunk, Splunk fails on configuration check. The following is the error:

Checking prerequisites...
    Checking http port [8000]: open
    Checking mgmt port [8089]: open
    Checking appserver port [127.0.0.1:8065]: open
    Checking kvstore port [8191]: open
    Checking configuration... Error while parsing '/opt/splunk/etc/apps/my_app/default/data/ui/views/map_drilldown.xml':
 not well-formed (invalid token): line 27, column 49

This error is pointing to "<" (less than) symbol in the search.

Please help to resolve this issue.

Thank you,

[chanfoli · Accepted solution]

Try wrapping your search in a CDATA section as in:

<![CDATA[ 
| inputlookup datalookup
| table TIMESTAMP COMMAND RESULT UTILIZATION
| search LATITUDE>=$sbound$ LATITUDE<$nbound$ LONGITUDE>=$wbound$ LONGITUDE<$ebound$
 ]]>

[vishaloptulink]

Thank you. That worked.