I have mistake that deleted the configuration default file.
WebUI does not work properly after server restart.
What should I do?
deleted files
splunk/etc/apps/SplunkForwarder/*
splunk/etc/apps/SplunkLightForwarder/*
splunk/etc/apps/legacy/*
splunk/etc/apps/sample_app/*
Hi @lifekis,
it wasn't a good idea to delete some Splunk's default apps!
Anyway, you have three ways to restore your Splunk installation:
The first two solutions are prefereable because quicker, but I don't know if they are possible in your installation, the third requires more work but it runs.
Ciao.
Giuseppe
Hi @lifekis,
it wasn't a good idea to delete some Splunk's default apps!
Anyway, you have three ways to restore your Splunk installation:
The first two solutions are prefereable because quicker, but I don't know if they are possible in your installation, the third requires more work but it runs.
Ciao.
Giuseppe
It was solved using the third method. Thanks.
You can force upgrade Splunk to the same version again to restore default apps and files.
If this reply helps you, an upvote/like would be appreciated.
thanks, I will try.