Refine your search:

Seeing this error in splunkd.log on a splunk indexer when running a saved search. What does it mean?

asked 26 Feb '10, 22:05

Jaci's gravatar image

Jaci ♦
8722217
accept rate: 75%

edited 01 Mar '10, 16:07


One Answer:

This error can be generated from a saved search that was created by the splunk admin account and then attempting to run as different user who does not have permission.

The fix is to change the permissions on the saved search.

link

answered 01 Mar '10, 22:34

Jaci's gravatar image

Jaci ♦
8722217
accept rate: 75%

Post your answer
toggle preview

Copyright © 2005-2012 Splunk, Inc. All rights reserved.