Check the field name in the | search (should be correct only but double check) and the app name (need the app folder name ).
OR may be just run this and check the app name.
| rest /services/data/indexes splunk_server=local | table title eai:acl.app
... View more
@rajksplunk -- Each of those correlation searches use extreme search. If the correlation searches themselves are enabled but the context generation searches are not, the correlation search will fail. See http://docs.splunk.com/Documentation/ES/4.1.1/User/ExtremeSearch for more on how extreme search works. Did these searches work (and were they enabled) before you upgraded?
... View more