Every time I try to enable the Splunk Monitoring Console, I get the following error:
User 'splunk-system-user' triggered the 'disable' action on app 'splunk_monitoring_console', and the following objects required a restart: checklist, dmc_alerts, splunk_monitoring_console_assets
It doesn't matter if we try via the API or the config files upon restarting splunk, the application's state in app.conf is set to disabled.
I am running Splunk version 188.8.131.52 with search head clustering enabled. Any ideas on how we can get the app to start?
If you are trying to enable it on a Search Head Cluster, it cannot be installed there. Here is the relevant section for our docs:
The Monitoring Console cannot be on a search head cluster member. The app is disabled on startup on a search head cluster member.
Here is a guide on where to host it at:
View solution in original post