Installation

After Splunk upgrade from 5.0.8 to 6.1.4 savedsearches are not showing up.

usha_nittala
New Member

Hi Splunk experts,

I have upgraded the version from 5.0.8 to 6.1.4, but after the upgrade, none of the previously created dashboard is working.

When I check any dashboard this error comes in all the panels.

"Warning: saved search not found: "Avg Response time for each transaction"

and this comes for all my savedsearches.

Can anyone help me figure out what is missing is it permission issue or something else, because info is present in savedsearches.conf

Thanks,
Usha

Labels (1)
0 Karma

Raghav2384
Motivator

Did you do a backup of all your *.confs before the upgrade? Saved seaches should be under savedsearches.conf file
Under /local or app/local etc.
Hope you find em all

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...