Archive
Highlighted

Eventtypes have gone missing

Path Finder

I have had Splunk Stream up and running for a while, but after upgrading to 7.3.1 some of my Eventtypes that drive the Stream dashboards seem to have gone AWOL. For example, I am mainly using Stream to monitor my sql database activity (tds). The Admin dashboard for databases used to work just fine, but now it is throwing the error: Eventtype 'streamaggdatabases' does not exist or is disabled.

I checked the Eventtypes after reading a post that said sometimes Eventtypes are disabled on upgrades, but this one is gone altogether. So I was wondering if anyone knows how to restore the Eventtypes for Stream? Thanks.

Tags (1)
0 Karma
Highlighted

Re: Eventtypes have gone missing

Path Finder

OK, I have answered this myself. The permissions for the Event Types for SplunkTAstream were restricted to 'The App' which is SplunkTAStream, bit of course the Stream App is splunkstreamapp ... So the fix is to enable the Permissions for All apps so that splunkstreamapp can access the Event Types.

View solution in original post

0 Karma