I set up a new instance of Splunk with the apps copied from my test machine to the new production environment. I set up my users using LDAP with two Role types, Splunk-Admins and Splunk-Users. I configured these roles the same on both machines.
If I log on as an administrator I can access every app that I copied. If I log in as a user I get this message for every app that I copied, "App 'XYZ' does not support UI access. See its app.conf for more information."
I've looked and looked and can't find anything amiss.
Here is a sample of the app.conf
[ui]
is_visible = true
is_manageable = true
label = XYZ Stats
[launcher]
author=Ken Mattern
description=This app will allow the user to view and query XYZ stats in real time.
version=1.0
Any and all ideas are very welcome. We have to begin testing yesterday.
Check your app permissions. Log into splunk as admin, and go to Manager > Apps. Click Permissions in the Sharing column for your app. Make sure that the roles you want to have access have at least Read permissions.
Check your app permissions. Log into splunk as admin, and go to Manager > Apps. Click Permissions in the Sharing column for your app. Make sure that the roles you want to have access have at least Read permissions.
Thanks. That worked. unfortunately it put me back to a point where I have to go back to support to tell them that their suggestion for the other issue just got broken - again.