After login into splunk search head server while opening the ES App get the error as:
404 page not found
Return to splunk home page
Page not found!
View more information about your request id ="...." in search
your logged into splunk server-name:8000, which is connected to splunkd @....... at https://127.0.0.1:8089 on Tue Mar 19 14:23:11 2019
It would be helpful if any resolution steps to resolve the issue
Thanks
Have you followed the described procedure in the docs how to setup Splunk ES? Did you follow the instructions on the setup page?
What you usually don't want to do, is, install Splunk, install Splunk ES and start directly without a plan.
Skalli
@skalliger we have installed properly has mentioned in document only few of them getting error as above
if there are a few people getting this error than it is likely they do not have any ES permission and thats why they are getting the error.
Check out the user's and roles.
@MattibergB permission are given for ES App, still getting the error as above.
Create a new user with the same permissions as people with the problems are using and try the ES app. Maybe set a different home app to see if you can switch to ES then (or if you can see it at all). If not, it's most likely a permission problem.
@skalliger I have created the new user as test with the ess_user role i am able to see the ES App but while opening still getting the error.
If you see es as a admin but not as a user then it is a permission issue. The user needs more then es user, inheret normal user and slowly add permissions till it works.