Splunk Dev

Why Saved searches for one application not showing up with btool?

cdurante
New Member

When I run splunk cmd btool savedsearches list --debug I do not see any saved searches for my application however there is a savedsearches.conf file in local with 11 saved searches that are configured similar to another application which does show when I run the btool. What would cause these savedsearches for this application not show up when I run btool? Thanks for your help.

Tags (1)
0 Karma

woodcock
Esteemed Legend

Where is the file? It must be in $SPLUNK_HOME/etc/*/default/savedsearches.conf or $SPLUNK_HOME/etc/*/local/savedsearches.conf.

0 Karma

somesoni2
Revered Legend

Check the file permissions.

0 Karma
Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...