Could not update saved search permission

When I tried to change my saved search from private to shared, I got this error msg.

Splunk could not update permissions for resource saved/searches [{'text': 'Cannot overwrite existing app object', 'code': None, 'type': 'ERROR'}]

What's the best way to debug and fix this?

savedsearch permissions

asked 10 Feb '11, 06:33

hochit
91●6
accept rate: 100%

One Answer:

0	I got the solution myself, probably because of integrity problem after I changed savedsearches.conf Should check etc/apps/search/metadata/local.meta Working now :) link answered 10 Feb '11, 06:45 hochit 91●6 accept rate: 100%

Post your answer

toggle preview

Email:

RSS:

Answers

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

Tags:

Asked: 10 Feb '11, 06:33

Seen: 801 times

Last updated: 24 Feb '11, 16:22