I'm getting "The view you requested could not be found" message after clicking "View Results" link in the alert's email.
Looks like a permission issue because the alert's owner can see the results thought that link.
The alert permission is set to read for everyone and write to admin role for all apps (global).
Dose anyone have an idea how I can solve this?
Here is a workaround until *6.6.3* is released.
Use get method which will default to none if the value is not available and also never raises a KeyError.
1. Create a saved report menu in search app by creating the etc/apps/search/local/data/ui/nav/default.xml file.
2. Copy the below XML to the file.
<nav search_view="search" color="#65A637"> <view name="search" default="true" /> <view name="datasets" /> <view name="reports" /> <view name="alerts" /> <view name="dashboards" /> <collection label="Saved reports"> <saved source="unclassified"/> </collection> </nav>
This is a known bug SPL-108433 and fixed in 6.3.2. Try the latest version and see if that helps.
I am facing this error with link in my scheduled report for Splunk version 7.1.1, please help me troubleshoot it
@snigdhasaxena did you find a solution?