...avedsearch name obviously), but cloning and modifying 400+ times seems wasteful
is there a way to do this using copy/pasta in savedsearches.conf/viewstates.conf?
would i need to manually create vsid values?
...olution. There must be a bug or something missing.
I checked for possible duplicates of the saved search, deleted all related viewstates.conf files, even installed the App in a brand new Splunk instance....