Splunk ITSI

When loading up a Glass Table within the ITSI app, there are no icons listed as available

ytenenbaum_splu
Splunk Employee
Splunk Employee

When loading up a Glass Table within the ITSI app, there are no icons listed as available.

0 Karma
1 Solution

ytenenbaum_splu
Splunk Employee
Splunk Employee

At each splunk start a script scans the glasstable_icon_library.conf and imports anything new to the kvstore.
The UI then works off the kvstore.
In this case it looks like the KVstore is having issues.
Here is the error message:
2018-06-08 18:46:48,091 INFO import_icons_SA-ITOA: Glasstable icon importer started
2018-06-08 18:46:49,015 INFO Starting new HTTPS connection (1): 127.0.0.1
2018-06-08 18:46:49,023 INFO Starting new HTTPS connection (1): 127.0.0.1
2018-06-08 18:46:49,029 INFO Starting new HTTPS connection (1): 127.0.0.1
2018-06-08 18:46:49,034 ERROR HTTP 503 Service Unavailable -- KV Store is initializing. Please try again later.

Solution:
To manually restart the script go to https://[your_ITSI_SH]/en-US/manager/itsi/data/inputs/script and disable and then enable the “/opt/splunk/etc/apps/SA-ITOA/bin/import_icons_SA_ITOA.py” script.

If the script is successful you will see the following entry in the log /opt/splunk/var/log/splunk/gt_icon_collection.log

2018-06-08 19:26:12,931 INFO import_icons_SA-ITOA: Successfully imported 37 icons to kvstore

View solution in original post

0 Karma

ytenenbaum_splu
Splunk Employee
Splunk Employee

At each splunk start a script scans the glasstable_icon_library.conf and imports anything new to the kvstore.
The UI then works off the kvstore.
In this case it looks like the KVstore is having issues.
Here is the error message:
2018-06-08 18:46:48,091 INFO import_icons_SA-ITOA: Glasstable icon importer started
2018-06-08 18:46:49,015 INFO Starting new HTTPS connection (1): 127.0.0.1
2018-06-08 18:46:49,023 INFO Starting new HTTPS connection (1): 127.0.0.1
2018-06-08 18:46:49,029 INFO Starting new HTTPS connection (1): 127.0.0.1
2018-06-08 18:46:49,034 ERROR HTTP 503 Service Unavailable -- KV Store is initializing. Please try again later.

Solution:
To manually restart the script go to https://[your_ITSI_SH]/en-US/manager/itsi/data/inputs/script and disable and then enable the “/opt/splunk/etc/apps/SA-ITOA/bin/import_icons_SA_ITOA.py” script.

If the script is successful you will see the following entry in the log /opt/splunk/var/log/splunk/gt_icon_collection.log

2018-06-08 19:26:12,931 INFO import_icons_SA-ITOA: Successfully imported 37 icons to kvstore

0 Karma

ytenenbaum_splu
Splunk Employee
Splunk Employee

At each splunk start a script scans the glasstable_icon_library.conf and imports anything new to the kvstore.
The UI then works off the kvstore.
In this case it looks like the KVstore is having issues.
Here is the error message:
2018-06-08 18:46:48,091 INFO import_icons_SA-ITOA: Glasstable icon importer started
2018-06-08 18:46:49,015 INFO Starting new HTTPS connection (1): 127.0.0.1
2018-06-08 18:46:49,023 INFO Starting new HTTPS connection (1): 127.0.0.1
2018-06-08 18:46:49,029 INFO Starting new HTTPS connection (1): 127.0.0.1
2018-06-08 18:46:49,034 ERROR HTTP 503 Service Unavailable -- KV Store is initializing. Please try again later.

Solution:
To manually restart the script go to https://[your_ITSI_SH]/en-US/manager/itsi/data/inputs/script and disable and then enable the “/opt/splunk/etc/apps/SA-ITOA/bin/import_icons_SA_ITOA.py” script.

If the script is successful you will see the following entry in the log /opt/splunk/var/log/splunk/gt_icon_collection.log

2018-06-08 19:26:12,931 INFO import_icons_SA-ITOA: Successfully imported 37 icons to kvstore

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...