We recently upgraded to Splunk 6.2.2 from 6.1.2. Since then we've been facing interruptions/disconnection issues in Splunk Web on one search head.
For example; when I click on any link on the webpage (dashboards/reports/search/whatever) splunk will get disconnected and IE will say "Internet Explorer cannot display the webpage".
Also, when I run searches/open reports (more or less any app on search and reporting) and stick around for a while on the webpage after the search completes etc, I get a message saying "Server error" on the page (although the search completes successfully/report runs normally).
These two issues seem to occur in conjunction: i.e, when I get more "server error" banners, I can be sure that I will face more disconnections.
This is not the case on the other pooled search-head or any other instance (same Splunk version on same IE browser)
What could be wrong?
There is a known bug with IE 9 that is resolved in 6.2.6. If you can upgrade and try it out, that might solve the problem.
There is a known bug with IE 9 that is resolved in 6.2.6. If you can upgrade and try it out, that might solve the problem.