Splunk Enterprise

Encountering errors when loading analytics workspace after 8.1 upgrade

JHHenson
Engager

We have recently upgraded our non-prod Splunk Enterprise single instance environment, and have notice a couple errors when we load the analytics workspace. The errors says "Maximum call stack size exceeded." I am unsure which features of the Analytics Workspace this could be affecting, and I can't find any errors in Splunkd which could explain the cause of the errors.

Screenshot 2020-12-09 at 15.40.07.png

sbrice18
Path Finder

We are having a similar issue but with permissions.  Opened a support ticket initially and it looked like a role was missing but after adding the role the error is still persistent.  We also added the capabilities that were missing with that role but that didn't fix it either.

 

### Missing Windows Capabilities
[capability::edit_modinput_winhostmon]
[capability::edit_modinput_winnetmon]
[capability::edit_modinput_winprintmon]
[capability::edit_modinput_perfmon]
[capability::edit_modinput_admon]

 

[role_window-admin]
edit_modinput_winhostmon = enabled
edit_modinput_winnetmon = enabled
edit_modinput_winprintmon = enabled
edit_modinput_perfmon = enabled
edit_modinput_admon = enabled

 

sbrice18_1-1639060954552.png

 

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...