https://community.splunk.com/t5/Reporting/Cannot-find-user-ID-with-id-1/m-p/44355#M920 <P>OK. The answer was pretty simple.</P> <P>Open up the saved search file at /opt/splunk/etc/system/local and change the userid from -1 to 1.</P> <P>I'd guess it was because I created them using the free version?</P> Mon, 18 Jul 2011 13:28:49 GMT wwhitener 2011-07-18T13:28:49Z https://community.splunk.com/t5/Reporting/Cannot-find-user-ID-with-id-1/m-p/44354#M919 <P>I am documenting an upgrade and get the following error messages for my saved searches:</P> <P>could not find user in splunk etc/passwd corresponding to id=-1 from savedsearch: TEST_SAVED_SEARCH ... simply using as is for meta</P> <P>I've tried manually putting in -1 into the passwd file. I've tried to hunt down the saved search file and nothing appears to be working. I'd like to continue the upgrade, but I can't afford to lose the numerous saved searches and data.</P> <P>Any ideas?</P> <P>Thanks.</P> Mon, 28 Sep 2020 09:44:21 GMT https://community.splunk.com/t5/Reporting/Cannot-find-user-ID-with-id-1/m-p/44354#M919 wwhitener 2020-09-28T09:44:21Z https://community.splunk.com/t5/Reporting/Cannot-find-user-ID-with-id-1/m-p/44355#M920 <P>OK. The answer was pretty simple.</P> <P>Open up the saved search file at /opt/splunk/etc/system/local and change the userid from -1 to 1.</P> <P>I'd guess it was because I created them using the free version?</P> Mon, 18 Jul 2011 13:28:49 GMT https://community.splunk.com/t5/Reporting/Cannot-find-user-ID-with-id-1/m-p/44355#M920 wwhitener 2011-07-18T13:28:49Z