Installation

After Splunk upgrade from 5.0.8 to 6.1.4 savedsearches are not showing up.

usha_nittala
New Member

Hi Splunk experts,

I have upgraded the version from 5.0.8 to 6.1.4, but after the upgrade, none of the previously created dashboard is working.

When I check any dashboard this error comes in all the panels.

"Warning: saved search not found: "Avg Response time for each transaction"

and this comes for all my savedsearches.

Can anyone help me figure out what is missing is it permission issue or something else, because info is present in savedsearches.conf

Thanks,
Usha

Labels (1)
0 Karma

Raghav2384
Motivator

Did you do a backup of all your *.confs before the upgrade? Saved seaches should be under savedsearches.conf file
Under /local or app/local etc.
Hope you find em all

0 Karma
Get Updates on the Splunk Community!

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...

Updated Data Management and AWS GDI Inventory in Splunk Observability

We’re making some changes to Data Management and Infrastructure Inventory for AWS. The Data Management page, ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...