Splunk Search

Work Flow Action | Show Source | Does not display data after upgrade to 7.2.5

gjohnson2
New Member

After upgrading to 7.2.5 from 6.2.2 the workflow action show source is not populating data when you click on the button. My users experienced the issue and brought it up. I'm logging in as admin and can't pull up the webpage.

I checked the permissions of the app in the configs and change it to 755 temporarily in linux. I checked the permissions in Splunk Web and it's readable to everyone and writeable to myself. Since it is in SplunkWeb I checked my sslkeys but I'm able to log in to the GUI so that shouldn't be an issue.

I checked the splunkd.access.log where the workflow actions log it's data and I'm getting an http 1.0 404 error for the show source action. I've been trying to trouble shoot this as it relates to the 404 error but no success.

This is a global issue because I can't access the show source in multiple apps. (Mark Logic, Search)

What am I missing or what do I need to do to mitigate this issue?

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...