Splunk Search

Work Flow Action | Show Source | Does not display data after upgrade to 7.2.5

gjohnson2
New Member

After upgrading to 7.2.5 from 6.2.2 the workflow action show source is not populating data when you click on the button. My users experienced the issue and brought it up. I'm logging in as admin and can't pull up the webpage.

I checked the permissions of the app in the configs and change it to 755 temporarily in linux. I checked the permissions in Splunk Web and it's readable to everyone and writeable to myself. Since it is in SplunkWeb I checked my sslkeys but I'm able to log in to the GUI so that shouldn't be an issue.

I checked the splunkd.access.log where the workflow actions log it's data and I'm getting an http 1.0 404 error for the show source action. I've been trying to trouble shoot this as it relates to the 404 error but no success.

This is a global issue because I can't access the show source in multiple apps. (Mark Logic, Search)

What am I missing or what do I need to do to mitigate this issue?

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...