Security

Why do all of our LDAP users' accounts show "[PROCESSING ERROR]" in the column "Default app inherited from"?

Explorer

In my Users page: https://splunk:8000/en-US/manager/search/authentication/users, all of our LDAP users accounts show "[PROCESSING ERROR]" in the column: Default app inherited from.

Is there a command to bulk-reassign each/all user's default app, or otherwise clear up this apparent error message?

0 Karma

Explorer

When you navigate to the "Manage Apps" page, have you also lost the ability to install new apps? Is the button missing?

0 Karma

SplunkTrust
SplunkTrust

Every user will be assigned some roles, so try setting a default app for all the roles from https://splunk:8000/en-US/manager/search/authentication/roles.

0 Karma

Explorer

When you navigate to the "Manage Apps" page, have you also lost the ability to install new apps? Is the button missing?

0 Karma

Explorer

I found an error in my splunkd.log = "AuthorizationManager - Capability 'editperpanel_filters' is not recognized by Splunk. Ignoring.."
Removed some of the suspect stanzas from authorize.conf - matching them up with authentication.conf, restarted and the error disappeared from the column. Also, the install apps buttons returned along with columns to disable/enable apps.

0 Karma