topic Re: SplunkEnterpriseSecuritySuite Error while opening the app in Deployment Architecture

SplunkEnterpriseSecuritySuite Error while opening the app

madhugn — Wed, 20 Mar 2019 11:46:54 GMT

After login into splunk search head server while opening the ES App get the error as:
404 page not found

Return to splunk home page
Page not found!

View more information about your request id ="...." in search

your logged into splunk server-name:8000, which is connected to splunkd @....... at https://127.0.0.1:8089 on Tue Mar 19 14:23:11 2019

It would be helpful if any resolution steps to resolve the issue
Thanks

Re: SplunkEnterpriseSecuritySuite Error while opening the app

skalliger — Wed, 20 Mar 2019 14:41:09 GMT

Have you followed the described procedure in the docs how to setup Splunk ES? Did you follow the instructions on the setup page?

What you usually don't want to do, is, install Splunk, install Splunk ES and start directly without a plan.

Skalli

Re: SplunkEnterpriseSecuritySuite Error while opening the app

madhugn — Wed, 20 Mar 2019 15:30:24 GMT

@skalliger we have installed properly has mentioned in document only few of them getting error as above

Re: SplunkEnterpriseSecuritySuite Error while opening the app

MattibergB — Wed, 20 Mar 2019 15:33:06 GMT

if there are a few people getting this error than it is likely they do not have any ES permission and thats why they are getting the error.
Check out the user's and roles.

Re: SplunkEnterpriseSecuritySuite Error while opening the app

madhugn — Thu, 21 Mar 2019 09:58:36 GMT

@MattibergB permission are given for ES App, still getting the error as above.

Re: SplunkEnterpriseSecuritySuite Error while opening the app

skalliger — Thu, 21 Mar 2019 12:52:38 GMT

Create a new user with the same permissions as people with the problems are using and try the ES app. Maybe set a different home app to see if you can switch to ES then (or if you can see it at all). If not, it's most likely a permission problem.

Re: SplunkEnterpriseSecuritySuite Error while opening the app

madhugn — Thu, 21 Mar 2019 15:07:34 GMT

@skalliger I have created the new user as test with the ess_user role i am able to see the ES App but while opening still getting the error.

Re: SplunkEnterpriseSecuritySuite Error while opening the app

MattibergB — Fri, 22 Mar 2019 17:10:22 GMT

If you see es as a admin but not as a user then it is a permission issue. The user needs more then es user, inheret normal user and slowly add permissions till it works.