Installation

After Splunk upgrade from 5.0.8 to 6.1.4 savedsearches are not showing up.

usha_nittala
New Member

Hi Splunk experts,

I have upgraded the version from 5.0.8 to 6.1.4, but after the upgrade, none of the previously created dashboard is working.

When I check any dashboard this error comes in all the panels.

"Warning: saved search not found: "Avg Response time for each transaction"

and this comes for all my savedsearches.

Can anyone help me figure out what is missing is it permission issue or something else, because info is present in savedsearches.conf

Thanks,
Usha

Labels (1)
0 Karma

Raghav2384
Motivator

Did you do a backup of all your *.confs before the upgrade? Saved seaches should be under savedsearches.conf file
Under /local or app/local etc.
Hope you find em all

0 Karma
Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...