Seeing this error in splunkd.log on a splunk indexer when running a saved search. What does it mean?
This error can be generated from a saved search that was created by the splunk admin account and then attempting to run as different user who does not have permission.
The fix is to change the permissions on the saved search.
This error can be generated from a saved search that was created by the splunk admin account and then attempting to run as different user who does not have permission.
The fix is to change the permissions on the saved search.