I set up a new instance of Splunk with the apps copied from my test machine to the new production environment. I set up my users using LDAP with two Role types, Splunk-Admins and Splunk-Users. I configured these roles the same on both machines.
If I log on as an administrator I can access every app that I copied. If I log in as a user I get this message for every app that I copied, "App 'XYZ' does not support UI access. See its app.conf for more information."
I've looked and looked and can't find anything amiss.
Here is a sample of the app.conf
is_visible = true
is_manageable = true
label = XYZ Stats
description=This app will allow the user to view and query XYZ stats in real time.
Any and all ideas are very welcome. We have to begin testing yesterday.
Check your app permissions. Log into splunk as admin, and go to Manager > Apps. Click Permissions in the Sharing column for your app. Make sure that the roles you want to have access have at least Read permissions.