topic Re: Get a Server Error running certain searches and unable to saving a report or alert for any search in Splunk Search

Get a Server Error running certain searches and unable to saving a report or alert for any search

mfeigel — Fri, 10 Jul 2020 20:55:55 GMT

Hi,
We are using Splunk Enterprise 8.0.4.1 with a Search head and two indexing cluster.

As a splunk administrator, I am getting a "Server error" certain searches and unable to saving a report or alert for any search.

Re: Get a Server Error running certain searches and unable to saving a report or alert for any search

richgalloway — Sat, 11 Jul 2020 00:28:14 GMT

Do you have the full text of the error message (more than just "server error")?
Have you checked splunkd.log?

Re: Get a Server Error running certain searches and unable to saving a report or alert for any search

mfeigel — Mon, 13 Jul 2020 19:23:35 GMT

<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access /en-US/splunkd/__raw/servicesNS/redacted/search/data/ui/views
on this server.<br />
</p>
</body></html>

Re: Get a Server Error running certain searches and unable to saving a report or alert for any search

richgalloway — Mon, 13 Jul 2020 19:45:20 GMT

That message says you don't have permission to do whatever you're trying to do. Does your account have the correct role?

BTW, I removed your email address from your last reply. Please take care to avoid posting private information in this public forum.

Re: Get a Server Error running certain searches and unable to saving a report or alert for any search

mfeigel — Mon, 13 Jul 2020 19:49:16 GMT

Thank you for removing my email. Yes my account as all the Splunk capabilities