Enterprise Security App

[careoregon]

Error in 'SearchOperator:loadjob': Cannot find artifacts for savedsearch_ident 'admin:SplunkEnterpriseSecuritySuite:ESS - Notable Events'

I get the above error in all the panels of the Security Posture in the Enterprise Security App.

[aelliott]

Here is someone that had a similar issue.

http://answers.splunk.com/answers/2380/cannot-find-artifacts-for-savedsearch_ident

[aelliott]

on that post at the end, @MasterOogway posted:
"Usually this shows up when your trying to compare results from a current search to a previous one and the results from the earlier search cannot be found. Appears to be harmless knowing this will go away once the search condition is met."

[careoregon]

I could be wrong but I don't think that it's a permissions issue. Even when I login as the default splunk admin I still get the error.