Re: Get a Server Error running certain searches an...

mfeigel · ‎07-10-2020

Hi,
We are using Splunk Enterprise 8.0.4.1 with a Search head and two indexing cluster.

As a splunk administrator, I am getting a "Server error" certain searches and unable to saving a report or alert for any search.

richgalloway · ‎07-10-2020

Do you have the full text of the error message (more than just "server error")?
Have you checked splunkd.log?

---
If this reply helps you, Karma would be appreciated.

mfeigel · ‎07-13-2020

<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access /en-US/splunkd/__raw/servicesNS/redacted/search/data/ui/views
on this server.<br />
</p>
</body></html>

richgalloway · ‎07-13-2020

That message says you don't have permission to do whatever you're trying to do. Does your account have the correct role?

BTW, I removed your email address from your last reply. Please take care to avoid posting private information in this public forum.

---
If this reply helps you, Karma would be appreciated.

mfeigel · ‎07-13-2020

Thank you for removing my email. Yes my account as all the Splunk capabilities

Get a Server Error running certain searches and unable to saving a report or alert for any search

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

Splunk Community Badges!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

Join the Conversation