i tried couple of time for the same error but seen the same error. after that i tried above work around
$SPLUNK_HOME/etc/apps/ForensicInvestigator/default/data/ui/views
iconv -f UTF-16LE -t UTF-8 portsservices.xml -o portsservices1.xml
i removed the old file and renamed the portsservices1.xml to portsservices.xml and it worked for me after that i started the splunk everything is working as expected.
... View more