Dashboards & Visualizations

Why are dashboards of an app not found on a pooled search head?

tamasmarton
Explorer

I have just configured two search heads in a pool. etc/user and etc/app are on a shared UNC location.
the app/(appname)/search works well.
the app/(appname)/(dashboardname) returns 404 Page not found.

I checked the permissions and shared with app and set to Everyone read and admin for write.
The same "page not found" appears when I create a new dashboard.

When I use the built in search app, then the dashboards display well.

is there any other thing I might missed or is it a restriction that only the buil-in apps can be displayed?

0 Karma
1 Solution

tamasmarton
Explorer

Found the solution. An empty folder with the same name has to be created on local etc/app on every search heads.
It solves the problem. Apps are working fine.

For creating a new app on the search head pool:
1. create an app over the web page
2. it will throw an exception.
3. don't panic!
4. go to the search head's local etc/app folder(it will be on that search head where you the load balancer routed. So it is only on one search head) and move the appname folder to the shared etc/app/ folder
5. create the empty app folder in the local etc/app folder on every search heads.
6. now you can edit and use the new app
7. be happy! 😉

I hope that helps

View solution in original post

tamasmarton
Explorer

Found the solution. An empty folder with the same name has to be created on local etc/app on every search heads.
It solves the problem. Apps are working fine.

For creating a new app on the search head pool:
1. create an app over the web page
2. it will throw an exception.
3. don't panic!
4. go to the search head's local etc/app folder(it will be on that search head where you the load balancer routed. So it is only on one search head) and move the appname folder to the shared etc/app/ folder
5. create the empty app folder in the local etc/app folder on every search heads.
6. now you can edit and use the new app
7. be happy! 😉

I hope that helps

Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...