View results email link leads to 404 Not Found

[R15]

One of my alerts is having an issue with the email link to the results not working. I get a 404 that says Oops. Page not found!
I'm the admin, so I don't think it's a permissions issue. Other alerts from the same app are working fine. Any ideas?

[ITWhisperer]

There is probably something wrong with the way you have set up the search for the alert.

[R15]

Can you elaborate on that? The search works fine on its own, and if the search was bad why would that cause the web page to not load? 

[ITWhisperer]

Perhaps if you elaborate on what your search is for your alert we might be able to help spot the issue?

[R15]

The search is very basic. The system is isolated so I can't copy/paste but it's just searching for one event code, action, and signature and tabling the results. There is nothing unique or unusual from other alert searches.

I don't understand how anything in the search string would cause a 404 error. 

[ITWhisperer]

It is not really the search, it is how you set up the link in the alert.

[R15]

I haven't messed with that at all, I simply have the box checked for Link to Results. 

[RanjiRaje]

Hi, I am facing the same issue. did you find any solution ? 

[R15]

Sorry I forgot to post the solution, I can't remember what it was. 

It was most likely one of these:
https://splunk.my.site.com/customer/s/article/Links-leading-to-alert-configuration-throw-404-error

https://community.splunk.com/t5/Security/Why-am-I-getting-a-quot-404-Not-Found-Page-not-found-quot-e...

[R15 · Accepted solution]

The issue came up again with only one alert. The app it's in had been set up with the fix to use request.ui_dispatch_app = search but when clicking the view results link in the email it was still going to the same app. I made the app visible and the page now loads. 

In /apps/<app_name>/local/app.conf add:

[ui]
is_visible = true

[ITWhisperer]

Hi @RanjiRaje 

Rather than trying to piggyback on someone else's issue, please start a new topic in Answers with details of your specific usecase, what you have tried so far, and the issues you are facing.