I upgraded a Windows 2008 R2 instance of Splunk 5.05 to Splunk 6 over the weekend. Prior to that I had been working on getting the AD application up and running along with setting up the AD Monitoring Data Input.
After the update, when I go to edit Data Inputs, I am confronted with the following error message on a red background
"There was an error retrieving the configuration, can not process this page."
This is only happening on some Data Input management/settings pages. It does not happen on the Files and Directories management page but does on AD monitioring, Registry monitoring, etc,...
Cheers and thanks in advance.
I am seeing the same issue when trying to get into all my management consoles. We are running our splunk instances on Red Hat. Here is an example, I went into access control, I click on Authentication Method and it sends me to the settings page. When I click on "configure Splunk to use LDAP and Map Groups" I get the same error.
This was a fresh install on new servers started with Splunk 6.0, everything worked fine. we upgraded to Splunk 6.01 - everything worked fine again. Recently I upgraded our Splunk instances to Splunk 6.0.2 and that is when we started having the issues.
Yes other management pages do the same thing. I can't get into several different ones. This is happening only on my two search heads - we are running search head pooling on NFS. Oddly enough same process on my cluster master and 3 index peers - all work fine.
I get the same error message after upgrading to Splunk 6 and trying to go into 'remote event log collections' and 'remote performance monitoring' from the Data Inputs screen.
Strangely enough though, if I click Add Data I can create new inputs, and it seems to still acknowledge the existing Event Logs and Perfmon entries.
What other apps are you guys running? I do not seem to have this issue at home where I am running a stripped down applicationless free licensed version. It is only at work on the Windows instance (as far as I know, no squawks from the Linux guys).
Please cut/paste the contents of the following files - $SPLUNK_HOME\etc\apps\launcher\local\admon.conf and $SPLUNK_HOME\etc\apps\launcher\local\regmon-filters.conf and $SPLUNK_HOME\etc\apps\launcher\local\inputs.conf.
I am able to get to the data inputs for Active Directory
Using this link,
which is the one arrived at going through the menu from the start page, brings the error up
$SPLUNK_HOMEetcappslauncherlocaladmon.conf -- no file of that name$SPLUNK_HOMEetcappslauncherlocalregmon-filters.conf -- no file of that name$SPLUNK_HOMEetcappslauncherlocalinputs.conf. -- as follows[splunktcp://9997][monitor://E:SplunketcappsSplunk_TA_windowsdefaultinputs.conf]
disabled = false
followTail = 0
sourcetype = config_fileI will throw this in additionally.