I have been receiving these errors when I try to clone a search. when cloning the search i am changing the search name and also editing the search itself, and trying to save it so i can delete the old one, but getting the error.Has anyone ran into this before and if so what is the solution.
Thanks
Yes. I get it too. I had fixed it somehow in the past, but now it has returned. The articles that refer to viewstate.conf do not help, as there is no viewstate in either the local or the default file. Neither has been modified in a year. I do however have many saved searches that work just fine.
I am noticing now that there are MULTIPLE versions of this file, one in each user profile.
For example: C:\Program Files\Splunk\etc\users\admin\search\local