Splunk Search

Work Flow Action | Show Source | Does not display data after upgrade to 7.2.5

New Member

After upgrading to 7.2.5 from 6.2.2 the workflow action show source is not populating data when you click on the button. My users experienced the issue and brought it up. I'm logging in as admin and can't pull up the webpage.

I checked the permissions of the app in the configs and change it to 755 temporarily in linux. I checked the permissions in Splunk Web and it's readable to everyone and writeable to myself. Since it is in SplunkWeb I checked my sslkeys but I'm able to log in to the GUI so that shouldn't be an issue.

I checked the splunkd.access.log where the workflow actions log it's data and I'm getting an http 1.0 404 error for the show source action. I've been trying to trouble shoot this as it relates to the 404 error but no success.

This is a global issue because I can't access the show source in multiple apps. (Mark Logic, Search)

What am I missing or what do I need to do to mitigate this issue?

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Welcome to the Future of Data Search & Exploration

You have more data coming at you than ever before. Over the next five years, the total amount of digital data ...

What’s new on Splunk Lantern in August

This month’s Splunk Lantern update gives you the low-down on all of the articles we’ve published over the past ...

This Week's Community Digest - Splunk Community Happenings [8.3.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...