I created a dashboard a couple of weeks ago, but now I'm unable to edit it. Any Change that I make results in a "Server Error" Message. I've tried restarting Splunk, but no dice. We're running 8.2.5
That looks like a networking issue. Have you checked with your network team?
Are you able to update other dashboards or do they all result in the same error?
Check the ownership/permissions of the dashboard file. Check splunkd.log for clues.
The permissions are correct. Here's what is showing in the logs when I attempt to save the dashboard.
That looks like a networking issue. Have you checked with your network team?
Are you able to update other dashboards or do they all result in the same error?
Yeah I checked the firewall and it looks like the IPS was dropping it as Command Injection. Doh!
Thank You!