I've installed the Splunk Add-On Builder but the UI is blank/won't load...I've tried installing on my HF (Heavy Forwarder) and my DS (Deployment Server) (HF is under a lot of load) but still the problem persists.
I opened a support ticket, and they discovered that my Okta/SAML/SSO had a "role" (for my SH (search head)) that was not present on my DS or HF (it wasn't necessary). However, my account was inheriting the "admin" role so IMO it shouldn't have mattered. I added the "role" to my HF and DS and was able to proceed.
But then...it happened again in another part of the UI. I opened another support ticket and the advice was not to use Add-On Builder in a distributed environment...which didn't make sense, what would having a distributed environment have to do with it?
What Add-On Builder does not like, I suspect, is basically any instance of Splunk with "roles" associated to accounts that are not the local/default admin and ONLY the local/default admin.
I deployed a stand-alone, local, Enterprise instance on my laptop NOT integrated with Okta/SAML/SSO and everything works fine...so that is the solution 😋
so install splunkES on a standalone server and have the free license won't fix that problem ? do you any other way to build add-on with CIM compliant for a custom logs ? thank you for your reply
I opened a support ticket, and they discovered that my Okta/SAML/SSO had a "role" (for my SH (search head)) that was not present on my DS or HF (it wasn't necessary). However, my account was inheriting the "admin" role so IMO it shouldn't have mattered. I added the "role" to my HF and DS and was able to proceed.
But then...it happened again in another part of the UI. I opened another support ticket and the advice was not to use Add-On Builder in a distributed environment...which didn't make sense, what would having a distributed environment have to do with it?
What Add-On Builder does not like, I suspect, is basically any instance of Splunk with "roles" associated to accounts that are not the local/default admin and ONLY the local/default admin.
I deployed a stand-alone, local, Enterprise instance on my laptop NOT integrated with Okta/SAML/SSO and everything works fine...so that is the solution 😋
Hi @marycordova
When you navigate to the UI, try opening DevTools/Console (this depends per browser) and have a look at the console when you load the Add-on builder UI - are there any errors or 4xx/5xx errors in there? This might help point to why it isnt loading correctly.
Let us know if you see any errors and can try and help further.
Regards
Will
I have the same issue
I installed it locally on Splunk local host, and the page "home" is empty
any idea?
Make sure you are using the local/default admin account and that there are no other roles associated with that account.
Yes.
this is my localhost so I use admin local user (the default one) and its have the max permission
did you find any solution for this ?
Yes, I just installed it in one of my license server and it was worked.
apparently, its not working in a free license anymore.