After upgrading to 6.3 (search head clustering) all our launcher app icons have disappeared even for default untouched apps.
ie. search & reporting.
The path to the icon shows an "undefined" path.
<img src="/en-US/splunkd/__raw/servicesNS/undefined/search/static/appIcon.png">
Upgrade was performed by stopping all instances.
Upgrading deployer.
Restart deployer.
Upgrade all search head cluster member instances.
Start member instances.
Wait for 5 minutes.
Do a new deploy from deployer.
As previously posted this is a known issue SPL-107449 where the UI is missing app icons and navigation drop downs.
It has been reported in 6.3 and 6.3.1
http://docs.splunk.com/Documentation/Splunk/6.3.1/ReleaseNotes/Knownissues
This is related from python 2.7.8 upgrade to python 2.7.9 where setting a cookie with brackets in the name can cause the issue.
Python has reported this bug in 2.7.9 and fixed in 2.7.10 as referenced in this link:
https://bugs.python.org/issue22931
Below are 2 options that can be used prior to the fix which is tentatively targeted for the next 6.3.x maintenance release.
Note: When the maintenance release is applied, it will overwrite this modified Cookie.py
Option 1:
1) Make a backup copy of $SPLUNK_HOME/lib/python2.7/Cookie.py
Keep in mind if for some reason you have custom changes in this Cookie.py, it will be overwritten by the replacement file for this fix in an upcoming maintenance release
2) Modify $SPLUNK_HOME/lib/python2.7/Cookie.py as the user who starts Splunk with the following changes:
From:
_LegalCharsPatt = r"[\w\d!#%&'~_`><@,:/\$\*\+\-\.\^\|\)\(\?\}\{\=]"
To:
_LegalCharsPatt = r"[\w\d!#%&'~_`><@,:/\$\*\+\-\.\^\|\)\(\?\[\]\}\{\=]"
3) Restart your Splunk search head(s)
Option 2:
1) Download the modified Cookie.py from here that includes the same fix as in Option 1
If you have issues with the download, please contact Support.
2) Make a backup copy of $SPLUNK_HOME/lib/python2.7/Cookie.py
3) Replace $SPLUNK_HOME/lib/python2.7/Cookie.py with the modified file
4) Restart your Splunk search head(s)