Dashboard stopped working in Splunk for Palo Alto Networks

[gwaligorski]

I was trying to grab the source code to build my own dashboard and now the URL dash is failing. Getting this error now
Search query is not fully resolved. Any help would be appreciated. I was just thinking of uninstalling and installing it but, that does not even seem to be simple.

[gwaligorski]

I tried to run that but, nothing was deleted.

[dfronck]

It sounds like you messed something up in one of the config files. I'd remove the app and then reinstall it. That should clean up any damage that was done.

Run this to remove the app.

splunk remove app SplunkforPaloAltoNetworks

[dfronck]

That's the same thing I get; overview works, nothing else. Are you using a cluster?

[gwaligorski]

I manually deleted the whole thing and reinstalled it. The main dashboard works but, nothing else is showing data properly.

[gwaligorski]

I tried to run that but, nothing was deleted.