topic Re: Enterprise Security App in Splunk Enterprise Security https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-App/m-p/163396#M676 <P>Here is someone that had a similar issue.</P> <P><A href="http://answers.splunk.com/answers/2380/cannot-find-artifacts-for-savedsearch_ident">http://answers.splunk.com/answers/2380/cannot-find-artifacts-for-savedsearch_ident</A></P> Mon, 24 Feb 2014 16:14:15 GMT aelliott 2014-02-24T16:14:15Z Enterprise Security App https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-App/m-p/163395#M675 <P>Error in 'SearchOperator:loadjob': Cannot find artifacts for savedsearch_ident 'admin:SplunkEnterpriseSecuritySuite:ESS - Notable Events'</P> <P>I get the above error in all the panels of the Security Posture in the Enterprise Security App.</P> Mon, 24 Feb 2014 15:12:53 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-App/m-p/163395#M675 careoregon 2014-02-24T15:12:53Z Re: Enterprise Security App https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-App/m-p/163396#M676 <P>Here is someone that had a similar issue.</P> <P><A href="http://answers.splunk.com/answers/2380/cannot-find-artifacts-for-savedsearch_ident">http://answers.splunk.com/answers/2380/cannot-find-artifacts-for-savedsearch_ident</A></P> Mon, 24 Feb 2014 16:14:15 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-App/m-p/163396#M676 aelliott 2014-02-24T16:14:15Z Re: Enterprise Security App https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-App/m-p/163397#M677 <P>I could be wrong but I don't think that it's a permissions issue. Even when I login as the default splunk admin I still get the error.</P> Mon, 24 Feb 2014 22:51:29 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-App/m-p/163397#M677 careoregon 2014-02-24T22:51:29Z Re: Enterprise Security App https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-App/m-p/163398#M678 <P>on that post at the end, @MasterOogway posted:<BR /> "Usually this shows up when your trying to compare results from a current search to a previous one and the results from the earlier search cannot be found. Appears to be harmless knowing this will go away once the search condition is met."</P> Tue, 25 Feb 2014 14:16:18 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Enterprise-Security-App/m-p/163398#M678 aelliott 2014-02-25T14:16:18Z