Glass Table not loading in Splunk ES

[hettervik]

Hi folks,

We have created a glass table in Splunk ES. It worked yesterday, but today when we try to open it, it doesn't load. That is, Splunk opens the glass table, but the screen just hangs on "loading saved glass table...". It never finishes loading. The same happens both if we open the glass table normally or open it in edit mode. Also, the other out-of-the-box glass tables are still working. It's just this one glass table that isn't loading. We tried using several different browsers as well, but the problem persists.

Any idea on how to troubleshoot and/or fix this issue?

[hettervik]

I've now upgraded to Splunk ES 6.0, but I still have the same problem.

[mguhad]

Hi,
Not sure if you are aware but ITSI is not supported on the same search head as Splunk Enterprise Security (ES).
This might be your issue?

Please re-visit your env posture and see if ITSI can run there as per https://docs.splunk.com/Documentation/ITSI/4.4.0/Install/Plan

Good Luck

[hettervik]

Hi. Thanks for the tip, but we're not running ITSI on the same search head as Splunk ES.