Getting Data In

Splunk Add-On Builder UI is Blank/Won't Load

marycordova
SplunkTrust
SplunkTrust

I've installed the Splunk Add-On Builder but the UI is blank/won't load...I've tried installing on my HF (Heavy Forwarder) and my DS (Deployment Server) (HF is under a lot of load) but still the problem persists.  

@marycordova
0 Karma
1 Solution

marycordova
SplunkTrust
SplunkTrust

I opened a support ticket, and they discovered that my Okta/SAML/SSO had a "role" (for my SH (search head)) that was not present on my DS or HF (it wasn't necessary).  However, my account was inheriting the "admin" role so IMO it shouldn't have mattered.  I added the "role" to my HF and DS and was able to proceed.  

But then...it happened again in another part of the UI.  I opened another support ticket and the advice was not to use Add-On Builder in a distributed environment...which didn't make sense, what would having a distributed environment have to do with it?  

What Add-On Builder does not like, I suspect, is basically any instance of Splunk with "roles" associated to accounts that are not the local/default admin and ONLY the local/default admin.

I deployed a stand-alone, local, Enterprise instance on my laptop NOT integrated with Okta/SAML/SSO and everything works fine...so that is the solution 😋

@marycordova

View solution in original post

0 Karma

warden0
Engager

so install splunkES on a standalone server and have the free license won't fix that problem ? do you any other way to build add-on with CIM compliant for a custom logs ? thank you for your reply 

 

0 Karma

marycordova
SplunkTrust
SplunkTrust

I opened a support ticket, and they discovered that my Okta/SAML/SSO had a "role" (for my SH (search head)) that was not present on my DS or HF (it wasn't necessary).  However, my account was inheriting the "admin" role so IMO it shouldn't have mattered.  I added the "role" to my HF and DS and was able to proceed.  

But then...it happened again in another part of the UI.  I opened another support ticket and the advice was not to use Add-On Builder in a distributed environment...which didn't make sense, what would having a distributed environment have to do with it?  

What Add-On Builder does not like, I suspect, is basically any instance of Splunk with "roles" associated to accounts that are not the local/default admin and ONLY the local/default admin.

I deployed a stand-alone, local, Enterprise instance on my laptop NOT integrated with Okta/SAML/SSO and everything works fine...so that is the solution 😋

@marycordova
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @marycordova 

When you navigate to the UI, try opening DevTools/Console (this depends per browser) and have a look at the console when you load the Add-on builder UI - are there any errors or 4xx/5xx errors in there? This might help point to why it isnt loading correctly.

Let us know if you see any errors and can try and help further.

Regards

Will

0 Karma

Shakira1
Explorer

I have the same issue

I installed it locally on Splunk local host, and the page "home" is empty 

 any idea?

Screenshot 2025-02-19 at 18.16.03.png

0 Karma

marycordova
SplunkTrust
SplunkTrust

Make sure you are using the local/default admin account and that there are no other roles associated with that account. 

@marycordova
0 Karma

Shakira1
Explorer

Yes.

this is my localhost so I use admin local user (the default one) and its have the max permission 

0 Karma

warden0
Engager

did you find any solution for this ?

0 Karma

Shakira1
Explorer

Yes, I just installed it in one of my license server and it was worked.

apparently, its not working in a free license anymore.

marycordova
SplunkTrust
SplunkTrust
Oh that's a bummer, I use a freebie as my dev LOL 😞
@marycordova
0 Karma

warden0
Engager

yeah i try to install splunk on a standalone instance and the gui of the add-on builder is now works without any issues 😇

0 Karma
Get Updates on the Splunk Community!

Celebrating Fast Lane: 2025 Authorized Learning Partner of the Year

At .conf25, Splunk proudly recognized Fast Lane as the 2025 Authorized Learning Partner of the Year. This ...

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...