Splunk Enterprise

Error 500 on splunkweb using specific user

splunkreal
Influencer

Hello, since upgrade 9.4.11 from 9.3.0 getting error 500 on splunkweb using local user (works with admin account). The user works fine from CLI using API but I wanted to try a query on splunkweb.

 

splunkreal_0-1785944175265.png

 

Exception observed is:
 
TypeError: 'NoneType' object is not subscriptable
 
File ".../util.py", line 1761, in should_use_app_bar_performance_optimizations
optimize_app_bar = splunk_web_optimizations_settings["enable_app_bar_performance_optimizations"]

 

Tried to recreate same role with limited capabilities and user on another platform and working fine, on same version.

 

/OPT/splunk/etc/system/local/authorize.conf

[role_monitoring]

get_diag = enabled

get_metadata = enabled

get_typeahead = enabled

rest_access_server_endpoints = enabled

rest_properties_get = enabled

search = enabled

srchIndexesAllowed = _*;linux;oxygene_cmdb;windows

srchJobsQuota = 9

srchMaxTime = 1800

srchTimeEarliest = -1

srchTimeWin = -1

 

 

Thanks.

* If this helps, please upvote or accept solution if it solved *
Labels (1)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...