Security

500 Internal Server "TypeError: 'NoneType' object is unsubscriptable" Error

mallem
Path Finder

I pushed a group of saved searches to a newly built v4.1.4 indexer from a v4.1.4 deployment head. The .bundle files end up in the /opt/splunk/var/run/[servername] directory on the target indexer and seem to be running fine on their 2-minute schedules. The problem I have is when I go to Manager --> Searches and Reports, and click on the "Run" link located to the far right of the saved searches. When clicking that link, I get the 500 Internal Server Error TypeError: 'NoneType' object is unsubscriptable message. Scoured Splunk.com for any info on what app.conf changes can be made, but came up with nothing.

0 Karma

mallem
Path Finder

There's no "debugging info" link. Below is the contents of everything on the screen at the time of the error.

500 Internal Server Error TypeError: 'NoneType' object is unsubscriptable

This page was linked to from https://splunkserver3.webum.net/en-US/manager/search/saved/searches.

You are using splunkserver3.webum.net, which is connected to splunkd @82143 at https://127.0.0.1:8089 on Mon Nov 29 08:38:36 2010.

0 Karma

sideview
SplunkTrust
SplunkTrust

There should be a 'debugging info' link or something on that 500 page. Or failing that a stack trace which should show up in the web_service log in index=_internal. Can you paste in the info from either of those?

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...