All Apps and Add-ons

Unknown parameter 'saved Search' is defined for module Saved Search. Make sure the parameter is specified in SavedSearch.conf.

royimad
Builder

While migrating my dashboards to sideview utils , i have faced this error during saving my dashboard.

Here is the code:

| metadata type=hosts | sort host | where like(host,"%wavemark%")


host
online.wavemark.net

<module name="Pulldown">
  <param name="name">host</param>
  <param name="label">Select Environment:</param>
  <param name="valueField">$name$</param>

  <module name="Switcher" group=" "  layoutPanel="panel_row4_col1">
    <param name="selectedGroup">$host$</param>

    ...

    <module name="SavedSearch" layoutPanel="panel_row4_col1" group="stagedb.wavemark.net">
      <param name="savedSearch">Long Running Reports Trend (2+ Seconds) - Daily Count</param>
      <module name="ViewstateAdapter">
        <param name="savedSearch">Long Running Reports Trend (2+ Seconds) - Daily Count</param>
        <module name="JobProgressIndicator" />
        <module name="EnablePreview">
          <param name="enable">True</param>
          <param name="display">False</param>
        </module>
        <module name="HiddenChartFormatter">
          <module name="FlashChart">
            <param name="width">100%</param>
            <module name="ConvertToDrilldownSearch">
              <module name="ViewRedirector">
                <param name="viewTarget">flashtimeline</param>
              </module>
            </module>
          </module>

        </module>
      </module>
    </module>
  </module>

</module>

0 Karma
1 Solution

sideview
SplunkTrust
SplunkTrust

There is no 'savedSearch' param to the SavedSearch module - it's just the "name" param. Change savedSearch to name and it'll work.

View solution in original post

sideview
SplunkTrust
SplunkTrust

There is no 'savedSearch' param to the SavedSearch module - it's just the "name" param. Change savedSearch to name and it'll work.

royimad
Builder

Thanks a lot dude. It's working great

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...

Introduction to Splunk AI

How are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. Lucky for ...