Troubleshoot search issues

You might encounter one or more of the following issues while exploring the new Search Experience preview on Splunk Cloud Platform:

• Search returns no results
• Search displays a visual error indicator

Search returns no results

You've written an SPL2 statement, but the search returns no data.

Cause

There are several reasons why an SPL2 statement returns no results. There might be a syntax error or the time range might be too narrow.

Solution

There are several possible solutions, depending on what has caused no results to return.

• Check to see if there is a visual indicator, such as an underscored part of the syntax, which shows that there is a syntax error.
• Verify that you have the correct time range selected:
  • Specify the narrowest possible time range for your search. But if no results are returned, expand your time range.
  • If you are using sample data, use All time for the time range.

Search displays a visual error indicator

Cause

When there is a syntax error in your search, several visual indicators might appear in the SPL Editor pane to identify where there is an issue with the syntax.

Solution

The following table describes the visual indicators:

Indicator	Common issues and solutions
A squiggly line appears under the syntax. Hover over the line to see a description of the issue.	Issue: Duplicate variable assignment. Solution: There is another statement in the module with the same name. For example, two statements have the name $search. Statement names must be unique. Change the name of one of the statements. Issue: Unexpected token. Solution: This error means that what you have specified doesn't match what the syntax expects. For example, you specify a string value without the quotation marks. Hover over the command or function prior to the indicator to display the popup help for the command or function to learn what the syntax expects. Issue: Missing predicate or Missing variable assignment. Solution: These errors indicate that something is missing from the syntax, such as a required argument. Hover over the command or function prior to the indicator to display the popup help for the command or function to determine what is missing.
A light bulb icon appears above the syntax. Select the icon to see a recommendation to resolve the issue.	Issue: Make the variable unique. Solution: There is another statement in the module with the same name. For example, two statements have the name $search. Statement names must be unique. Change the name of one of the statements.