When adding embedded map reports to a dashboard, the page loads the base map with the embed code, but none of the data/overlays appear. It returns a 401 unauthorized error.
It works with authenticated users but it defeats the purpose of having the embedded reports on an external page.
Map visualizations use postprocess searches to filter results based on the displayed map bounds. However, after transitioning down to Search V2 APIs in newer versions of Splunk for security reasons, postprocess searches are blocked if run in an embedded context. This is causing those 401 errors.
The following map view shows no data, notice the errors from the dev tools from the browser:
Network tab:
Console tab:

The fixes have been backported to the sustain branches and should be available in versions 9.3.4, 9.4.2 and 9.5.x.
| Revision | Publish Date | Comments |
|---|---|---|
1.0 |
29-Sep-2026
|
Initial Release |