Giters

gjanders / SplunkAdmins

Splunk Admins application to assist with troubleshooting Splunk enterprise installations

Home Page:https://splunkbase.splunk.com/app/3796/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Error in 'SearchParser'

SANSd20 opened this issue · comments

commented

When running "MonitoringConsole - Crash logs have appeared on the filesystem", I get the error "Error in 'SearchParser': The search specifies a macro 'indexer_cluster' that cannot be found. Reasons include: the macro name is misspelled, you do not have "read" permission for the macro, or the macro has not been shared with this application. Click Settings, Advanced search, Search Macros to view macro information."

I do not see the macro 'indexer_cluster', the closest I see is 'indexer_cluster_name' or 'indexer_cluster_name(1)'.

commented

Thanks for finding this, that bug was in 1 searches. I have 1 more bug to get fixed so I'll release a new version today with the fixes

commented

Released version 3.0.11, thanks for reporting this one!