Archive

Dashboard display could not find object id= after migrating in 7.2.3

New Member

I've upgrade Splunk Enterprise in 7.2.3, everything went well. I opened the dashboard and have on most of my dashboard the message could not find object id= ....
I have all the rights and honestly I'm stuck, does anyone can help?
Thanks

Tags (1)
0 Karma
1 Solution

Influencer

Hi,

are you able to create new dashboards?

There was a bug in earlier 6.x versions where users couldn´t create dashboards with error like you have. Might be related?!

View solution in original post

0 Karma

Influencer

Hi,

are you able to create new dashboards?

There was a bug in earlier 6.x versions where users couldn´t create dashboards with error like you have. Might be related?!

View solution in original post

0 Karma

New Member

Hi,

yes I'm able to create dashboard.
I think it is related with the scheduled reports but I do not understand.
I used to created my dashboard with reports but I don't find my report since the upgrade...

[CustomerX Deep Security Malware Event]
action.email.useNSSubject = 1
alert.track = 0
dispatch.earliesttime = -30d@d
dispatch.latest
time = now
display.events.fields = ["host","source","sourcetype","Domain","cefseverity"]
display.general.type = visualizations
display.page.search.mode = verbose
display.page.search.tab = visualizations
display.statistics.show = 0
display.visualizations.charting.chart.stackMode = stacked
display.visualizations.charting.chart.style = minimal
request.ui
dispatchapp = search
request.ui
dispatchview = search
search = index=xxx
antimalware product="Deep Security Manager" cefrulename="Alert Started" msg="Alert: Anti-Malware Alert*" "customerX*" | timechart count by target

0 Karma

Influencer

Ok if you can´t find objects after a splunk upgrade thats sounds like they where somehow created in default before the update?? This would explain why they are missing now. Default is overwritten after an upgrade

0 Karma

New Member

well i have to recreate the daashboard then... 😞

0 Karma

Influencer

I would be happy if you could accept and upvote the answer 🙂

0 Karma

Influencer

sry to hear that, but you are not suppost to create objects in default. Always use local.

Maybe you backup your splunk folder somewhere with your server backup? maybe you can find them there.

0 Karma