search

LukeMurphey / splunk-network-tools

A Splunk app that is useful for performing troubleshooting and management of networks
Apache License 2.0
7 stars 7 forks source link

Network tool App issue after upgrading splunk to 9.1.0.2 #13

Open walidnazzal opened 1 year ago

walidnazzal commented 1 year ago

We had upgraded our Splunk instance from version 8.2.6 to 9.1.0.2 but after the upgrade some dashboards aren't working in Network Tools App and we see the followings errors:

Status Overview DashBoard does show any output: image

When i executed the the SPL command for Dashbard Status Overview i got the following errors image

and i saw this warning in splunkd.log file: 09-06-2023 10:49:12.903 -0400 WARN SearchOperator:kv [4093676 TcpChannelThread] - Invalid key-value parser, ignoring it, transform_name='hydra_access_log_fields'. 09-06-2023 10:49:12.904 -0400 WARN SearchOperator:kv [4093676 TcpChannelThread] - Invalid key-value parser, ignoring it, transform_name='hydra_gateway_log_fields'. 09-06-2023 10:49:12.904 -0400 WARN SearchOperator:kv [4093676 TcpChannelThread] - Invalid key-value parser, ignoring it, transform_name='hydra_scheduler_log_fields'. 09-06-2023 10:49:12.904 -0400 WARN SearchOperator:kv [4093676 TcpChannelThread] - Invalid key-value parser, ignoring it, transform_name='pool_name_field_extraction'. 09-06-2023 10:49:12.904 -0400 WARN SearchOperator:kv [4093676 TcpChannelThread] - Invalid key-value parser, ignoring it, transform_name='hydra_worker_log_fields'. 09-06-2023 10:49:12.931 -0400 WARN SearchOperator:kv [4093676 TcpChannelThread] - Invalid key-value parser, ignoring it, transform_name='pool_name_field_extraction'. 09-06-2023 10:49:12.953 -0400 WARN SearchOperator:kv [4093676 TcpChannelThread] - Invalid key-value parser, ignoring it, transform_name='hydra_logger_fields'.

Could you please help us to resolve this issue.