SE ver 9.1.2
Upgrading from ES 7.2 to 7.3.1. Ran the install (expands the SPL out to the respective apps)
Restarted Splunkd
Went into UI and started ES ap where its stating that ES has not been fully configured and to hit the green button to do so (continue to app setup page)
When I do, I get the error message popup of:
ParsingError: Source contains parsing errors: '<string>' [line 2]: '[]\n'
Hit ok and we dont go anywhere... can go to other apps so Splunk Enterprise is ok... ES... no so ok...
Help