Error in 'SearchOperator:loadjob': Cannot find artifacts for savedsearch_ident 'admin:SplunkEnterpriseSecuritySuite:ESS - Notable Events'
I get the above error in all the panels of the Security Posture in the Enterprise Security App.
Here is someone that had a similar issue.
http://answers.splunk.com/answers/2380/cannot-find-artifacts-for-savedsearch_ident
on that post at the end, @MasterOogway posted:
"Usually this shows up when your trying to compare results from a current search to a previous one and the results from the earlier search cannot be found. Appears to be harmless knowing this will go away once the search condition is met."
I could be wrong but I don't think that it's a permissions issue. Even when I login as the default splunk admin I still get the error.