Unable to viewstate information; formatting may not be correct

[christinmb]

I have my dashboards and while using my administrator account (the one I used to create this account) and everything is ok, but if I make a new user account I'm getting this error message and its really annoying because I have no idea what's wrong.. Any ideas?

[vidda42]

Hi dude !

Just had the same problem with my dashboards view...
As I have to do my stuff VERY QUICKLY, I searched and found the following.

Just one thing before I tell you how to solve this, keep in mind that it is, for me, the "quick & dirty" method ! 🙂 (maybe it is the right & only one !)

-= Let's say that the new created user is TOTO, and the concerned app is SEARCH =-

1) Go to your new user directory :

[root@Splunk local]# pwd

/opt/splunk/etc/users/TOTO/search/local

2) Backup your actual viewstates.conf, just in case :

[root@Splunk local]# cp viewstates.conf viewstates.conf_ORI

3) Overwrite your user viewstates.conf with the admin's one :

[root@Splunk local]# cp ../../../admin/search/local/viewstates.conf .

cp: overwrite `./viewstates.conf'? y

4) Restart your splunk instance :

[root@Splunk local]# chown -R splunk:splunk /opt/splunk/ && /opt/splunk/bin/splunk restart

5) ENJOY your dashboard with no more viewstates errors !!! 😉

David