App has an overriding copy of the "flashtimeline.xml"

[mstegmueller]

Hey Splunkers,

I just did the upgrade to splunk 5.0.6. And I got this message on my searchhead:
App "sausageApp" has an overriding copy of the "flashtimeline.xml" view, thus the new version may not be in effect. location=/opt/splunk/etc/apps/sausageApp/default/data/ui/views

Now I am wondering: Where is the new version of "flashtimeline.xml" ? So I can overwrite mine to be fully upgraded?

Best Regards and Thanks,
Markus

[MuS]

Hi mstegmueller,

quickest approach, do a SSH login to your Splunk server and search for it:

find /opt/splunk -name flashtimeline.xml -exec ls -la {} \;

and replace yours with the newest one found.

hope this helps ...

cheers, MuS

[somesoni2]

Is the flashtimeline.xml file is set as global withing sausageApp?? The one within search app is global, so that might be causing the conflict.

[sowings]

IIRC, apps layer on alphabetically, so Splunk is reporting that sausageApp's version of flashtimeline is taking precedence over the default one in search.

[MuS]

other question, why do use a flashtimeline.xml in your app if it is the same as in the search app?

[mstegmueller]

Hi MuS,

Thanks for your quick answer. But I already thought about that. Anyway, I used your string in the obvious result was:

-r--r--r-- 1 splunk splunk 13059 2013-11-08 02:45 /opt/splunk/etc/apps/search/default/data/ui/views/flashtimeline.xml -r--r--r-- 1 splunk splunk 13059 2013-11-21 10:45 /opt/splunk/etc/apps/sausageApp/default/data/ui/views/flashtimeline.xml

So somehow this still seems to be newer (even though, it isn't). I already thought that the search app should have the most recent version, but wasn't sure about it. Can someone confirm this?

Best Regards, Markus