Are you a member of the Splunk Community?
- Find Answers
- :
- Using Splunk
- :
- Other Using Splunk
- :
- Alerting
- :
- Why are my alerts created under the launcher app, ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Today I opened up my Alerts page and clicked "All Apps" and half of my alerts were gone. I finally realized it was all the ones that were in the launcher app.
Has anyone else seen this happen? When I review the apps listed in the /apps directory through the Terminal, the launcher app still seems to be present.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I found out whats happening and honestly, Im feeling pretty dumb and kinda surprised.
Apparently, the visibility of certain apps is dependent on the PATH you take to get to the list of Reports, Alerts and/or Dashboards.
I was going into the Search app and then clicking on Alerts in the upper left top menu bar. Then I would click Apps: All expecting for ALL APPS to appear but launcher apps dont appear there.
When I went to Settings -> Searches, Reports, and Alerts... I found the missing launcher alerts and everything else.
Doh.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I found out whats happening and honestly, Im feeling pretty dumb and kinda surprised.
Apparently, the visibility of certain apps is dependent on the PATH you take to get to the list of Reports, Alerts and/or Dashboards.
I was going into the Search app and then clicking on Alerts in the upper left top menu bar. Then I would click Apps: All expecting for ALL APPS to appear but launcher apps dont appear there.
When I went to Settings -> Searches, Reports, and Alerts... I found the missing launcher alerts and everything else.
Doh.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@EricLloyd79,
Did someone accidentally changed the visibility of launcher app ?
What goes around comes around. If it helps, hit it with Karma 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I dont think so. I looked for an app.conf in /opt/splunk/etc/apps/launcher/local but didn't find one but one was located in /opt/splunk/etc/apps/launcher/default and it looks like this:
Version 7.1.1
[install]
is_configured = true
allows_disable = false
[ui]
label = Home
is_visible = true
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Can you still see all your alerts listed in savedsearches.conf under /opt/splunk/etc/apps/launcher/local. Each alert name will be referenced as each stanza; like [my_example_alert]
Community Content Calendar, September edition
Splunkbase Unveils New App Listing Management Public Preview
Leveraging Automated Threat Analysis Across the Splunk Ecosystem
