I'm using a SQL query to populate panels in a dashboard. When I paste my query into the "edit search string" box, everything works. The data and plot display as expected.
When I click "done editing", everything is still good. I can click the refresh icon below the panel with no problems.
As soon as I refresh the page in the browser, though, I get "no results found" in the panel. The error message says:
'command="dbquery", A database error occured: You have an error in your SQL syntax...near " at line 1.
Weirder still, this only affects ~half of my panels, and there is no different in the query structure. Thoughts? Thanks in advance!
@jkat54, thanks for the tip, that was a helpful wiki!
Ultimately, the comments in my sql code were causing the problem. When I paste it into splunk from my text editor, the formatting is preserved, so comments don't cause any problems. When I refresh the page, line breaks disappear, so the code no longer runs.
@jkat54, thanks for the tip, that was a helpful wiki!
Ultimately, the comments in my sql code were causing the problem. When I paste it into splunk from my text editor, the formatting is preserved, so comments don't cause any problems. When I refresh the page, line breaks disappear, so the code no longer runs.
Ah, so you've solved the problem?
Yes! Should I self-answer the question?
Yep, i'll convert your comment to answer, you mark as answer.
thanks jkat54!
YVW @ojasklowski ... see ya around!
How many panels do you have? Curious if your hitting a limit of simultaneous searches for your user's role.
https://wiki.splunk.com/Community:TroubleshootingSearchQuotas