topic Receiving the error in Phantom when adding external Splunk under administration settings in Splunk Dev https://community.splunk.com/t5/Splunk-Dev/Receiving-the-error-in-Phantom-when-adding-external-Splunk-under/m-p/487179#M8706 <P>In Phantom, when adding an External Splunk under Administration Settings -&gt; Search Settings, getting an error that test connection failed and when saving getting this error: </P> <PRE><CODE>"Save changes failed. Settings not updated. [u'Missing local Splunk configuration, please do not overwrite']. " </CODE></PRE> <P>Caveat is my in Splunk test connectivity passes and I'm getting artifacts from Splunk.</P> Tue, 17 Sep 2019 18:46:29 GMT sanchezfg 2019-09-17T18:46:29Z Receiving the error in Phantom when adding external Splunk under administration settings https://community.splunk.com/t5/Splunk-Dev/Receiving-the-error-in-Phantom-when-adding-external-Splunk-under/m-p/487179#M8706 <P>In Phantom, when adding an External Splunk under Administration Settings -&gt; Search Settings, getting an error that test connection failed and when saving getting this error: </P> <PRE><CODE>"Save changes failed. Settings not updated. [u'Missing local Splunk configuration, please do not overwrite']. " </CODE></PRE> <P>Caveat is my in Splunk test connectivity passes and I'm getting artifacts from Splunk.</P> Tue, 17 Sep 2019 18:46:29 GMT https://community.splunk.com/t5/Splunk-Dev/Receiving-the-error-in-Phantom-when-adding-external-Splunk-under/m-p/487179#M8706 sanchezfg 2019-09-17T18:46:29Z