where to look for my view's xml error msg

[sou128]

say I made some changes to my view's advanced xml, saved it and tried to run it. If the xml has some errors (say missing a required attribute), I don't get an error upon saving but get a 404 error when trying to run it. This leaves me no clue as to what the error was.

Is there a setting for this so splunk spits out the error msg instead of redirecting me to a 404. I also checked the logs under var/log/splunk but nothing there either.

I'm running version 4.3.1, btw. thx

[jgedeon120 · Accepted solution]

Have you looked in the splunk web logs? You can also use the Splunk app SOS to view these logs.

[sou128]

thx.
installed sos and found the msg under web_service log.