Share via

Default Okta Workbook Template show errors: Request is invalid and cannot be processed: Syntax error: Query could not be parsed: SYN0001: I could not parse that, sorry. [line:position=0:0].

Jon Naglieri 106 Reputation points
2021-03-10T15:35:35.023+00:00

This was working fine a few days ago, but we are evaluating Sentinel and set up Okta event ingestion. The default (out-of-the-box) Okta Workbook Template, on the 3rd tab for "User/Session Analysis", now all of a sudden shows these errors on each query: Request is invalid and cannot be processed: Syntax error: Query could not be parsed: SYN0001: I could not parse that, sorry. [line:position=0:0]. I haven't modified this template or the ingestion, and the other tabs in this workbook show data without issue. Only this third tab now shows these errors. Can you please assist?

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,211 questions
Accepted answer
  1. Jon Naglieri 106 Reputation points
    2021-03-14T15:10:07.597+00:00

    Actually, it appears this error has gone away! Not sure what caused it, but all good now.

    2 people found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.