I've just upgraded to Splunk v9.1.0.1 in a stand-alone (S1 SVA) lab instance from 9.0.x. All fine and operating at a basic level, see attached image. However since the upgrade there is a UI issue.
Unable to load app list. Refresh the page to try again.
I have checked splunkd error log and I'm not seeing anything notable:
index="_internal" source="/opt/splunk/var/log/splunk/splunkd.log" log_level IN (ERROR, WARN)
| table event_message
| dedup event_message
I have also verified consistency of ownership of $SPLUNK_HOME:
sudo find /opt/splunk -printf '%u:%g\n' | sort -t: -u
I'm not seeing anything obvious and I have checked the Known Issues list. Has anybody else seen this before I expend a lot of effort on a new release. I should mention that this is now using a Free 500MB license, I have a 10GB NFR license waiting to renew but I don't see this as an issue and it is not in violation.
Update:
After installing an NFR licence and restarting Splunkd all the errors disappeared on the page. Therefore it is either licence 'feature' or error when a free licence is applied. @takitakitanana thanks for contributing on this.
Is there a solution for free licenses?
Hey @jwilczek I'm afraid not. Have you tried to run a later version of Splunk, I suspect you won't run into the problem there.
Update:
After installing an NFR licence and restarting Splunkd all the errors disappeared on the page. Therefore it is either licence 'feature' or error when a free licence is applied. @takitakitanana thanks for contributing on this.