Splunk Search

Error on saved searches after upgrading to 4.2.1

remy06
Contributor

After I've upgraded splunk from 4.1.5 to 4.2.1,some of the saved searches encountered errors now,while some are ok.

Error message:
Error in 'file' command: You have insufficient privileges to perform this operation.

[SimpleResultsTable module] Server reported HTTP status=400 while getting mode=results <?xml version='1.0' encoding='UTF-8'?> <response><messages><msg type='FATAL'>Error in &apos;file&apos; command: You have insufficient privileges to perform this operation.</msg></messages></response>

Tags (2)
0 Karma

gkanapathy
Splunk Employee
Splunk Employee

The file command was deprecated as of 4.1.x, and finally removed in 4.2. You can use inputcsv or inputlookups to replace it in many cases.

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...