Getting Data In

Add Data > Upload: Why is the index list incomplete under Input Settings on Splunk 6.2?

amperry25
Engager

While uploading a file, when I attempt to select an index from the dropdown menu in the Input Settings, an incomplete list of indexes appears (this appears to be a UI issue as it is only showing up to those that start with the letter 'm' and appears to reach a limit and truncate the rest of the list). Has anyone else had similar issues or determined a proper fix/workaround?

Splunk 6.2 on Windows Server
Chrome Browser

1 Solution

ChrisG
Splunk Employee
Splunk Employee

This is a known issue in 6.2 (SPL-93063). It is scheduled to be fixed in a maintenance release.

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

This is a known issue in 6.2 (SPL-93063). It is scheduled to be fixed in a maintenance release.

dlchum
New Member

I tried to apply the patch.
But now the index list only contains "Default" index, nothing else.
Any idea?
Thanks.

0 Karma

sylim_splunk
Splunk Employee
Splunk Employee

Until the next maintenance release available, you can work around by changing

  • local/web.conf minify_js = false

minify_css = false

  • share/splunk/search_mrsparkle/exposed/js/routers/AddData.js, line 556

before :
search: 'isInternal=0 disabled=0'

after :
search: 'isInternal=0 disabled=0', count: -1

  • restart splunk instance for the change to take effect

After the next maintenance upgrade, make sure to remove the changes in web.conf

Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...