Getting Data In

Encountered the following error while trying to clone: [HTTP 404] Viewstate object not found; view=* viewstate=hm2iqwgr

dapetersen
Loves-to-Learn

I have been receiving these errors when I try to clone a search. when cloning the search i am changing the search name and also editing the search itself, and trying to save it so i can delete the old one, but getting the error.Has anyone ran into this before and if so what is the solution.
Thanks

Tags (1)
0 Karma

colbymahan
Explorer

Yes. I get it too. I had fixed it somehow in the past, but now it has returned. The articles that refer to viewstate.conf do not help, as there is no viewstate in either the local or the default file. Neither has been modified in a year. I do however have many saved searches that work just fine.

I am noticing now that there are MULTIPLE versions of this file, one in each user profile.

For example: C:\Program Files\Splunk\etc\users\admin\search\local

  • To make it even more exciting, now that I have located the other files, I cannot reproduce the error to see what the missing viewstate was... It is working fine. I guess Splunk just needed to look over my shoulder as I looked for the file and then it said, "oh yeah, thats where i left that" and resumed working. LOL no other explanation, since i did not move or change a single thing.
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...