Go to Settings >> Searches, Reports, and Alerts, choose a search that lives in an invisible app and click search name to edit, Alert actions: "Click to edit actions" link you will get the following error: 404 Not Found
The problem is reproducible when an app is invisible and you try and:
Edit an alert action of a scheduled search which lives in an invisible app "Click to edit actions".
Click "run" from a saved search in an invisible app.
Click on saved search name from the "View recent" page" of a search that lives in an invisible app.
Set the request.ui_dispatch_app = search in the "savedsearches.conf" of the invisible app ($SPLUNK_HOME/etc/apps/app_name/local/savedsearches.conf).
| Revision | Publish Date | Comments |
|---|---|---|
1.0 |
28-Sep-2026
|
Initial Release |