In the app navigation menu, the area where you can switch between apps, all of the menu icons are broken. Instead of showing the small image, it shows a text box that says "menu icon." I have attached an image of this. Please note that this is for all apps as well, not just search & reporting.
Does anyone have any insight on where this error might be at? How to fix this?
In your favorite Browser, open this tab:
http://<yourSplunk>/en-US/splunkd/__raw/servicesNS/admin/search/static/appIconAlt.png or http://<yourSplunk>/en-US/splunkd/__raw/servicesNS/admin/search/static/appIconAlt_2x.png
Do you see an icon in the browser? If you do NOT, then check file permissions on the searchheads. The images must be readable by Splunk.
If you do see the icon in the browser, there is something more sinister afoot. Don't forget to check the Network calls in the Developer Tools of the Browser, you might be able to see where it is breaking.
Thanks for the quick reply.
I went to the links you provided and I received the following:
"The image "https:///en-US/splunkd/__raw/servicesNS/admin/search/static/appIconAlt.png" cannot be displayed because it contains errors.
Do you think this is a permission issue?
It's possible. Can you
ls -la the folder
$SPLUNK_HOME/etc/apps/search/appserver/static? post the results?
Copy the images from the search head to your local system, and see if they render correctly.
/opt/splunk/etc/apps/search/static # ls -la
drwxr-xr-x 2 splunk splunk 4096 Sep 1 16:35 .
drwxr-xr-x 10 splunk splunk 4096 Jul 22 21:49 ..
-r--r--r-- 1 root root 437 Sep 1 16:35 appIcon.png
-r--r--r-- 1 root root 444 Sep 1 16:35 appIconAlt.png
-r--r--r-- 1 root root 735 Sep 1 16:35 appIconAlt2x.png
-r--r--r-- 1 root root 734 Sep 1 16:35 appIcon2x.png
I also have moved the icons over to my local windows machine and windows photo viewer is not able to view them.
/opt/splunk/etc/apps/search/static # ls -la total 24 drwxr-xr-x 2 splunk splunk 4096 Sep 1 16:35 . drwxr-xr-x 10 splunk splunk 4096 Jul 22 21:49 .. -r--r--r-- 1 root root 437 Sep 1 16:35 appIcon.png -r--r--r-- 1 root root 444 Sep 1 16:35 appIconAlt.png -r--r--r-- 1 root root 735 Sep 1 16:35 appIconAlt_2x.png -r--r--r-- 1 root root 734 Sep 1 16:35 appIcon_2x.png
They also will not open in my windows machine.
Right, ok. So let's start with permissions.
chown -R splunk: /opt/splunk/etc/apps. This will reset owner and group to
This will reload the images and break any caches.
I'm also on IRC #splunk on Efnet.org if you wanna chat in realtime.
Adding to the conversation down here to see if I can keep it straight better... same issue here, and did confirm that restpropertiesget is granted...
Permissions look like this:
drwxr-xr-x. 2 splunk splunk 4096 Aug 13 16:05 .
drwxr-xr-x. 10 splunk splunk 4096 Jul 10 00:28 ..
-rwxr-xr-x. 1 splunk splunk 3556 Jul 9 23:26 appIcon2x.png
-rwxr-xr-x. 1 splunk splunk 2547 Jul 9 23:26 appIconAlt2x.png
-rwxr-xr-x. 1 splunk splunk 1981 Jul 9 23:26 appIconAlt.png
-rwxr-xr-x. 1 splunk splunk 3167 Jul 9 23:26 appIcon.png