All Apps and Add-ons

Created a Dashboard using Sideview Utils, copying the XML to another enviroment does not work

ten_yard_fight
Path Finder

I built a dashboard using Sideview Utils postprocess searching, works fine in one environment but when I copy over the XML to a separate environment where I copied over the Sideview Utils framework (same version as working env.) The dashboard does not render any results. At first, I thought of the obvious which was permission issues, but that didnt appear to be the problem. Or is it?

The environment where I manually installed Sideview Utils does not have internet connection to Splunk because of network classification. Can that be an issue?

1 Solution

ten_yard_fight
Path Finder

OK, I figured it out! Turns out I did not have search access to an index included in my post process. I could not see the error quickly because the debug information was not indicating where the search failed. I had to tear the code apart and build it a piece at a time. I started as somesoni2 suggested, as soon as copying one of the demo views worked I knew it had to be something else. Thank you for your help. Keep Splunking away!

View solution in original post

ten_yard_fight
Path Finder

OK, I figured it out! Turns out I did not have search access to an index included in my post process. I could not see the error quickly because the debug information was not indicating where the search failed. I had to tear the code apart and build it a piece at a time. I started as somesoni2 suggested, as soon as copying one of the demo views worked I knew it had to be something else. Thank you for your help. Keep Splunking away!

ben_leung
Builder

Something to verify, the data that populates the dashboard in the working environment should be the same as the environment that you copied the XML over to.

Maybe that is why the new dashboard does not render any results. Maybe you can post the XML here so we can have a look?

0 Karma

ten_yard_fight
Path Finder

Ahh! Sounds like a good test. Will get back to you with my results. Thanks for the suggestion.

0 Karma

somesoni2
Revered Legend

Can you perform one small test here? Since, your dashboard is using PostProces, can you clone a postprocess related example/demo from Sideview_util app (say post_process2_dynamic) into your app, change the sharing permission to this app and see if that still works. Idea here is to identify if any of Sideview modules need some permission fix.

ten_yard_fight
Path Finder

I copied over the sideview_utils directory to the /apps directory. I then restarted Splunk. The App itself works fine, when I test out the demos in the documentation, those work. Its when I open my dashboard under a different app. So I made the permissions global, available to all other apps. But that still didn't do it.

0 Karma

somesoni2
Revered Legend

On the environment where dashboard is not working, you copied the sideview app directory or installed it using its .gz file from Manage Apps? Also, did you restarted the splunk instance?

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...