Yes. I get it too. I had fixed it somehow in the past, but now it has returned. The articles that refer to viewstate.conf do not help, as there is no viewstate in either the local or the default file. Neither has been modified in a year. I do however have many saved searches that work just fine.
I am noticing now that there are MULTIPLE versions of this file, one in each user profile.
For example: C:\Program Files\Splunk\etc\users\admin\search\local
- To make it even more exciting, now that I have located the other files, I cannot reproduce the error to see what the missing viewstate was... It is working fine. I guess Splunk just needed to look over my shoulder as I looked for the file and then it said, "oh yeah, thats where i left that" and resumed working. LOL no other explanation, since i did not move or change a single thing.
