we upgraded our Splunk Enterprise installation from 6.5.3 to 6.6.0 today. After the upgrade we get "ogin failed" when trying to use the iOS Splunk app. Accessing the web interface using the Safari-browser works, however, so the URL and port are correct...
The addon for Splunk Mobile is 2.4.2 and we are using the newest version of the iOS app.
We are authorize the Splunk users via LDAP, which works, because otherwise we wouldn't be able to use the "normal" web interface...
We re-installed both the Mobile addon inside Splunk Enterprise and the iOS app on the iPad, but this changed nothing.
hmmm... maybe I found something (a bug?)...
05-09-2017 18:46:28.272 +0200 WARN HTTPAuthManager - Token not specified in Authorization: Splunk header
05-09-2017 18:46:28.285 +0200 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n File "/export/server/splunk/lib/python2.7/site-packages/splunk/admin.py", line 130, in init\n hand.execute(info)\n File "/export/server/splunk/lib/python2.7/site-packages/splunk/admin.py", line 594, in execute\n if self.requestedAction == ACTIONLIST: self.handleList(confInfo)\n File "/export/server/splunk/etc/apps/mobileaccess/bin/apistatushandler.py", line 27, in handleList\n serverinfo = service.info()\n File "/export/server/splunk/etc/apps/mobileaccess/bin/splunklib/client.py", line 450, in info\n response = self.get("/services/server/info")\n File "/export/server/splunk/etc/apps/mobile_access/bin/splunklib/binding.py", line 300, in wrapper\n "Request failed: Session is not logged in.", he)\nAuthenticationError: Request failed: Session is not logged in.\n
05-09-2017 18:46:28.285 +0200 ERROR AdminManagerExternal - Unexpected error "" from python handler: "Request failed: Session is not logged in.". See splunkd.log for more details.
same pb and same log, with that :
05-16-2017 14:15:17.865 +0200 WARN HttpListener - Socket error from xx.xx.xx.xx while idling: error:1408F10B:SSL routines:SSL3GETRECORD:wrong version number