Dashboards & Visualizations

Error while modifying Splunk for BlueCoat dashboard search

pillowhead
Explorer

I am trying to modify the 'Overview-Top Clients by IP' search on the dashboard overview page in Splunk for BlueCoat. I go to the 'Apps Manager\splunkforbluecoat-View Configurations\Overview - Top Clients by IP' and then I modify the search. When I click on save I get the following error:

Encountered the following error while trying to update: In handler 'savedsearch': Cannot find viewstate with vsid="fx3mgenj"

The search string works when used from the search line in Splunk for BlueCoat.

Tags (1)
0 Karma
1 Solution

bwooden
Splunk Employee
Splunk Employee

I was able to re-produce using Splunk 4.1 (build 77833).

I created the below file (and restarted Splunk) as a work-around.

$SPLUNK_HOME/etc/apps/SplunkforBlueCoat/local/viewstates.conf
[*:fx3mgenj]

View solution in original post

0 Karma

rotten
Communicator

I'm getting this with one of our saved searches in a custom app as well. (Splunk 4.1.4) I don't have the option to so easily restart Splunk. I saved the search again with a new name and was able to edit that. Then I deleted the original search.

bwooden
Splunk Employee
Splunk Employee

I was able to re-produce using Splunk 4.1 (build 77833).

I created the below file (and restarted Splunk) as a work-around.

$SPLUNK_HOME/etc/apps/SplunkforBlueCoat/local/viewstates.conf
[*:fx3mgenj]

0 Karma

pillowhead
Explorer

This solved my issue. Thank you!

0 Karma

sri_ratp
Engager

this works. thank you

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Index This | How many sevens are there between 1 and 100?

August 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Enhance Security Operations with Automated Threat Analysis in the Splunk EcosystemAre you leveraging ...

What Is Splunk? Here’s What You Can Do with Splunk

Hey Splunk Community, we know you know Splunk. You likely leverage its unparalleled ability to ingest, index, ...