- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk Enterprise Security Content Management blank
adidibra
Engager
08-05-2021
03:10 AM
Hello,
I performed a "fresh" installation of ES 4.6.1 in a search head cluster through deployer. Splunk app version is 8.0.9.
The apps for the ES were pulled from a repository solution to deployer and then pushed to the search cluster. When I try to open the content management it is stuck in blank and the Incident Review displaying "Operation Failed, Internal Error. __enter__" error.
Is there any log file I might check and permission I need to change a this behavior is quite strange?
Thank you in advance
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
08-05-2021
05:19 AM
Splunk 8.0.9 does not support ES 4.6.1. That's an antique version of ES. Try an older (unsupported) version of Splunk or a newer version of ES.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
