Dashboards & Visualizations

Create a custom Splunk view Tutorial not working

smhsplunk
Communicator

Hello

I am trying to run this tutorial from http://dev.splunk.com/view/SP-CAAAERG

When I try to hit refresh (/debug/refresh) I get this and also, I do not see "Hello World" once I go to the dashboard page. It shows the dashboard empty.

Refreshing admin/collections-conf          BadRequest 
In handler 'collections-conf': Must use user context of 'nobody' when interacting with collection configurations (used user='admin')

Can you tell me how to fix this ?

Tags (3)
0 Karma

jcrabb_splunk
Splunk Employee
Splunk Employee

The debug/refresh endpoint will reload configs that are available under /servicesNS/admin/search/admin endpoint. Under the admin endpoint, we have collection-conf endpoint which does provide _reload option, thus it would throw the following type of error.

In handler 'collections-conf': Must use user context of 'nobody' when interacting with collection configurations (used user='admin')

This collections-conf issue/error has now been addressed in the following releases:

- Splunk 6.2.8 - (bug: SPL-107404)
- Splunk 6.3.4 - (bug: SPL-111358)
- Splunk 6.4.0 - (bug: SPL-111360)

Jacob
Sr. Technical Support Engineer
0 Karma

smhsplunk
Communicator

I have restarted splunk both from the web interface and also manually form \bin, still doesnt show.
Even tried disabling enabling app.

0 Karma

somesoni2
Revered Legend

Try restarting your splunk instance instead.

0 Karma

smhsplunk
Communicator

When I hit refresh these are the three BadRequest I get, rest shows OK

Refreshing admin/collections-conf BadRequest
In handler 'collections-conf': Must use user context of 'nobody' when interacting with collection configurations (used user='admin')

Refreshing admin/remote_indexes BadRequest
In handler 'remote_indexes': The following required arguments are missing: repositoryLocation.

Refreshing admin/transforms-reload ResourceNotFound
In handler 'transforms-reload': Invalid action for this internal handler (handler: transforms-reload, supported: list|_reload, wanted: list).

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security: Your Command Center for PCI DSS Compliance

Every security professional knows the drill. The PCI DSS audit is approaching, and suddenly everyone's asking ...

Developer Spotlight with Guilhem Marchand

From Splunk Engineer to Founder: The Journey Behind TrackMe    After spending over 12 years working full time ...

Cisco Catalyst Center Meets Splunk ITSI: From 'Payments Are Down' to Root Cause in ...

The Problem: When Networks and Services Don't Talk Payment systems fail at a retail location. Customers are ...