topic "Viewstate object not found" error while cloning a search in Monitoring Splunk

"Viewstate object not found" error while cloning a search

bbc — Mon, 13 May 2013 12:11:18 GMT

This is Splunk 5.0.1. Fresh install, i.e. not an upgrade from a previous version.

Sometimes, when trying to clone a search, I get an error like: "[HTTP 404] Viewstate object not found; view=* viewstate=foo" (and the clone fails).

What does this mean? Why does it happen? How can I resolve it?

I haven't yet tried to reduce this to a minimum set of reproducible steps, sorry.

Re: "Viewstate object not found" error while cloning a search

mdegann — Wed, 08 Jan 2014 21:14:34 GMT

This usually means that there is no metadata for your Vewstate ID. The easiest way to fix this is to go into your savedsearches.conf and remove the

*vsid = **

Lines and do a https://127.0.0.1:8000/en-GB/debug/refresh. This will rebuild all the required VSID's, you could also take the alternate root and write them into your app/metadata/local.meta

Re: "Viewstate object not found" error while cloning a search

sonicZ — Wed, 11 Jun 2014 17:13:17 GMT

This method works, but I just migrated from Splunk4.3.2 to Splunk6.1, I have to do this for all users saved searches? Going to be a pain....