https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196767#M4253 <P>this is a different error</P> Fri, 28 Aug 2015 19:16:08 GMT vrmandadi 2015-08-28T19:16:08Z https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196765#M4251 <PRE><CODE>| loadjob savedsearch="admin:app_utc_rgswin:app_utc_rgswin_TotalHostsByWeek" | timechart span=1d latest("# of Hosts") AS "# of Hosts" | search "# of Hosts" = * </CODE></PRE> <P>When trying to run the search above, I'm getting this error:</P> <PRE><CODE>Encountered an error while reading file 'F:\Splunk\var\run\splunk\dispatch\scheduler__admin_YXBwX3V0Y19yZ3N3aW4__RMD52ef372a2bc27f2fc_at_1440771000_1731\results.csv.gz'. </CODE></PRE> <P>Can anyone please help in this issue?</P> Fri, 28 Aug 2015 15:12:52 GMT https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196765#M4251 vrmandadi 2015-08-28T15:12:52Z https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196766#M4252 <P>Didnt you already ask this question on another thread?</P> <P>What happens when you try and run this...<BR /> | savedsearch app_utc_rgswin_TotalHostsByWeek</P> Tue, 29 Sep 2020 07:08:31 GMT https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196766#M4252 cramasta 2020-09-29T07:08:31Z https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196767#M4253 <P>this is a different error</P> Fri, 28 Aug 2015 19:16:08 GMT https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196767#M4253 vrmandadi 2015-08-28T19:16:08Z https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196768#M4254 <P>Did you run the query i sent?</P> Fri, 28 Aug 2015 19:23:36 GMT https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196768#M4254 cramasta 2015-08-28T19:23:36Z https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196769#M4255 <P>yup it says cannot find artifacts for saved search</P> Fri, 28 Aug 2015 19:38:36 GMT https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196769#M4255 vrmandadi 2015-08-28T19:38:36Z https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196770#M4256 <P>Thats not making sense. The savedsearch command should just try and run the query behind the saved search, not load artifacts. Are you the person who created the search? Do you have permissions to access the saved search? </P> Fri, 28 Aug 2015 20:01:14 GMT https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196770#M4256 cramasta 2015-08-28T20:01:14Z https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196771#M4257 <P>I have not created the query and I do have the permission to access it.</P> Mon, 31 Aug 2015 13:44:20 GMT https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196771#M4257 vrmandadi 2015-08-31T13:44:20Z https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196772#M4258 <P>I believe that could be the reason for your loadjob failure. I haven't tested it, but I don't think so any non-admin user should be able to see result of other people's search result.</P> Mon, 31 Aug 2015 15:15:20 GMT https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196772#M4258 somesoni2 2015-08-31T15:15:20Z https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196773#M4259 <P>Yeah if you don't have read permissions on a saved search then you will not be able to view the cached jobs</P> Mon, 31 Aug 2015 17:55:41 GMT https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196773#M4259 cramasta 2015-08-31T17:55:41Z https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196774#M4260 <P>This happens when the search the saved search is trying to load is empty or did not run because of errors.</P> Tue, 29 Sep 2015 20:31:34 GMT https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196774#M4260 bmas10 2015-09-29T20:31:34Z https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196775#M4261 <P>Check to see if</P> <PRE><CODE>F:\Splunk\var\run\splunk\dispatch\scheduler__admin_YXBwX3V0Y19yZ3N3aW4__RMD52ef372a2bc27f2fc_at_1440771000_1731\results.csv.gz </CODE></PRE> <P>exists and the permissions on the file.</P> Tue, 29 Sep 2015 20:40:22 GMT https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196775#M4261 nnmiller 2015-09-29T20:40:22Z https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196776#M4262 <P>Looks like a filesystem permissions issue. Make sure that that file exists, and that the user splunk is running as can read the file.</P> Sat, 03 Oct 2015 21:11:02 GMT https://community.splunk.com/t5/Reporting/Why-am-I-getting-quot-Encountered-an-error-while-reading-file/m-p/196776#M4262 muebel 2015-10-03T21:11:02Z