Installation

After Splunk upgrade from 5.0.8 to 6.1.4 savedsearches are not showing up.

usha_nittala
New Member

Hi Splunk experts,

I have upgraded the version from 5.0.8 to 6.1.4, but after the upgrade, none of the previously created dashboard is working.

When I check any dashboard this error comes in all the panels.

"Warning: saved search not found: "Avg Response time for each transaction"

and this comes for all my savedsearches.

Can anyone help me figure out what is missing is it permission issue or something else, because info is present in savedsearches.conf

Thanks,
Usha

Labels (1)
0 Karma

Raghav2384
Motivator

Did you do a backup of all your *.confs before the upgrade? Saved seaches should be under savedsearches.conf file
Under /local or app/local etc.
Hope you find em all

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...