I run into this constantly, and have found no reliable solution other than editing inputs.conf and restarting splunkd, which as you say, is not much of a solution. When I'm at a point where I simply can't afford the outage, sometimes I will keep banging away at the UI and the query will eventually save, but this issue needs attention for dbx to be taken seriously.
... View more