Splunk Search

Why am I unable to make a dashboard from the "Search" App global with error "Could not find writer for : /nobody/search/views/ [0] [E:\Splunk\etc]"?

jcpsupport
New Member

New to Splunk. Created a custom dashboard using Search App, but it is private. When I am trying to make it Global, I am getting the following error:

In handler 'views': Could not find writer for: /nobody/search/views/ [0] [E:\Splunk\etc] 

My account has admin rights and I also checked splunkd.log. The only related message there is:

WARN  ConfPathMapperManager - Could not find writer for: /nobody/search/views/ [0] [E:\Splunk\etc]

Please help me figure this out.

P.S. If I create dashboards under any app other than the "Search" app, I can make them global without problems.

0 Karma

ryanoconnor
Builder

This sounds a lot like a permissions issue. In this case I'd try and let Splunk tell you more about Splunk.

To do that, have you tried searching the _internal index for local splunkd logs related to this? It might help to attempt to make the change, record the time, and then search at that time for

index=_internal ERROR

Then you should be able to start to drill down to see what might be going on and filter out irrelevant log sources like remote_searches or the scheduler.

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...