Installation

After upgrading from Splunk 6.0 to 6.3.2, why does the Data Inputs page on my search head have a green 'Add Data' button linking to nowhere?

crazyeva
Contributor

I recently upgraded Splunk from 6.0 to 6.3.2. Everything seems right, but the 'Data inputs' page has the same issue as the old version with a green 'Add Data' button linking to nowhere.
Its url: 'http:///en-US/manager/search/datainputstats', from menu: 'Settings', 'Data inputs'.
I realized only one of my Splunk servers gets into this situation and it is my main Search Head.

Now I upgraded it to Splunk 6.3.3 (untar the .tgz file and cover to old folder) trying to solve this problem, but failed.

Is there anyone can help to upgrade Splunk partly?

Labels (2)
Tags (3)
0 Karma

maciep
Champion

do you happen to have any apps/add-ons that add custom inputs - like dbconnect, rest, jms etc?

0 Karma

crazyeva
Contributor

It happened to be "Yes", I have dbconnect and defined some inputs there. Does that impact so much?

0 Karma

maciep
Champion

I think you may need to upgrade dbconnect to the latest version where the issue has been addressed. Older versions of dbconnect break the data inputs page on newer versions of Splunk.

Here's the bug on the dbconnect release notes:

pre-1.2.0   DBX-873, DBX-882, DBX-277, SPL-91835    When upgrading to or installing Splunk Enterprise 6.2.0, Splunk DB Connect version 1.1.4 or earlier prevented the Data Inputs page from showing the Forwarded Inputs section.
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...