After upgrading to 6.3 (search head clustering) all our launcher app icons have disappeared even for default untouched apps.
ie. search & reporting.
The path to the icon shows an "undefined" path.
<img src="/en-US/splunkd/__raw/servicesNS/undefined/search/static/appIcon.png">
Upgrade was performed by stopping all instances.
Upgrading deployer.
Restart deployer.
Upgrade all search head cluster member instances.
Start member instances.
Wait for 5 minutes.
Do a new deploy from deployer.
As previously posted this is a known issue SPL-107449 where the UI is missing app icons and navigation drop downs.
It has been reported in 6.3 and 6.3.1
http://docs.splunk.com/Documentation/Splunk/6.3.1/ReleaseNotes/Knownissues
This is related from python 2.7.8 upgrade to python 2.7.9 where setting a cookie with brackets in the name can cause the issue.
Python has reported this bug in 2.7.9 and fixed in 2.7.10 as referenced in this link:
https://bugs.python.org/issue22931
Below are 2 options that can be used prior to the fix which is tentatively targeted for the next 6.3.x maintenance release.
Note: When the maintenance release is applied, it will overwrite this modified Cookie.py
Option 1:
1) Make a backup copy of $SPLUNK_HOME/lib/python2.7/Cookie.py
Keep in mind if for some reason you have custom changes in this Cookie.py, it will be overwritten by the replacement file for this fix in an upcoming maintenance release
2) Modify $SPLUNK_HOME/lib/python2.7/Cookie.py as the user who starts Splunk with the following changes:
From:
_LegalCharsPatt = r"[\w\d!#%&'~_`><@,:/\$\*\+\-\.\^\|\)\(\?\}\{\=]"
To:
_LegalCharsPatt = r"[\w\d!#%&'~_`><@,:/\$\*\+\-\.\^\|\)\(\?\[\]\}\{\=]"
3) Restart your Splunk search head(s)
Option 2:
1) Download the modified Cookie.py from here that includes the same fix as in Option 1
If you have issues with the download, please contact Support.
2) Make a backup copy of $SPLUNK_HOME/lib/python2.7/Cookie.py
3) Replace $SPLUNK_HOME/lib/python2.7/Cookie.py with the modified file
4) Restart your Splunk search head(s)
I also have this problem, but I seem to have stumbled across a workaround. If I move into the Build Event Type dialog box, all the disabled controls suddenly become available. Can anyone else confirm?
I also have this issue. Along with the all of the menus not working properly, the settings tab doesn't even exist. Also when I run a search I get the error
In handler 'savedsearch': Cannot get username when all users are selected.
It is an intermittent issue and if I switch from Chrome to Internet Explorer everything seems to work fine. I would much rather use Chrome tho!