Deployment Architecture

SplunkEnterpriseSecuritySuite Error while opening the app

madhugn
Explorer

After login into splunk search head server while opening the ES App get the error as:
404 page not found

Return to splunk home page
Page not found!

View more information about your request id ="...." in search

your logged into splunk server-name:8000, which is connected to splunkd @....... at https://127.0.0.1:8089 on Tue Mar 19 14:23:11 2019

It would be helpful if any resolution steps to resolve the issue
Thanks

Tags (1)
0 Karma

skalliger
Motivator

Have you followed the described procedure in the docs how to setup Splunk ES? Did you follow the instructions on the setup page?

What you usually don't want to do, is, install Splunk, install Splunk ES and start directly without a plan.

Skalli

0 Karma

madhugn
Explorer

@skalliger we have installed properly has mentioned in document only few of them getting error as above

0 Karma

MattibergB
Path Finder

if there are a few people getting this error than it is likely they do not have any ES permission and thats why they are getting the error.
Check out the user's and roles.

0 Karma

madhugn
Explorer

@MattibergB permission are given for ES App, still getting the error as above.

0 Karma

skalliger
Motivator

Create a new user with the same permissions as people with the problems are using and try the ES app. Maybe set a different home app to see if you can switch to ES then (or if you can see it at all). If not, it's most likely a permission problem.

0 Karma

madhugn
Explorer

@skalliger I have created the new user as test with the ess_user role i am able to see the ES App but while opening still getting the error.

0 Karma

MattibergB
Path Finder

If you see es as a admin but not as a user then it is a permission issue. The user needs more then es user, inheret normal user and slowly add permissions till it works.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...