Get a Server Error running certain searches and un...

mfeigel · ‎07-10-2020

Hi,
We are using Splunk Enterprise 8.0.4.1 with a Search head and two indexing cluster.

As a splunk administrator, I am getting a "Server error" certain searches and unable to saving a report or alert for any search.

richgalloway · ‎07-10-2020

Do you have the full text of the error message (more than just "server error")?
Have you checked splunkd.log?

---
If this reply helps you, Karma would be appreciated.

mfeigel · ‎07-13-2020

<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access /en-US/splunkd/__raw/servicesNS/redacted/search/data/ui/views
on this server.<br />
</p>
</body></html>

richgalloway · ‎07-13-2020

That message says you don't have permission to do whatever you're trying to do. Does your account have the correct role?

BTW, I removed your email address from your last reply. Please take care to avoid posting private information in this public forum.

---
If this reply helps you, Karma would be appreciated.

mfeigel · ‎07-13-2020

Thank you for removing my email. Yes my account as all the Splunk capabilities

Get a Server Error running certain searches and unable to saving a report or alert for any search

other

Extending Observability Content to Splunk Cloud

More Control Over Your Monitoring Costs with Archived Metrics!

New in Observability Cloud - Explicit Bucket Histograms