All of a sudden everything is working. Maybe i didn't wait long enough after restarting services. The "default" folder has been removed from our custom app. "Show Source" and "Advanced Edit" work now, some dashboards are still broken, but they probably do use advanced xml. ... View more

Show source works in some of the other apps and is broken in some. The search app does have it set: [views/show_source] export = system ... View more

Tried that, and show source stopped working. Removed the default and local folders from the app, and show source still wouldn't work. ... View more

Thanks so much! There were some customizations in the default folder that i wasn't sure if were safe to delete. Deleting the data folder didn't work, so i copied the views from the search app to our custom app. Now "Show Source" works. Still have a few dashboards throwing the error, but at least making progress. ... View more

It looks like the "search" page is the one with the issue. I tried adding ?showsource to the end of my search page url, and at the end after doing a search, but it just refreshes the page. When I click on Show Source in an event, a url similiar to this shows up briefly before going to the OOPS page: https://mysplunk/en-US/app/myapp/show_source?sid=1586985134.55214_B1086B2C-C090-4409-B71D-B9F32EA5CDAB&offset=0&latest_time= Adding ?showsource to that link just directs to the OOPS page. Some of our "search" dashboards are broken too, but adding ?showsource just redirects to the OOPS page as well. ... View more

I know, i've seen the doc. But how do i determine if it was written in advanced xml? It's not listed in the views, it's on the main search page. ... View more

I followed the directions in the link you posted. Is it normal for the "Buckets" numbers to rise every time the servers are rebooted? Each peer had 12 buckets, and after rebooting twice, they now have 29. ... View more