I created an app contain most of the required element include macro, lookup, navigator, UI, savedsearches, etc. however, when I switched to the app first : go to setting -> macro, then Splunk w...
See more...
I created an app contain most of the required element include macro, lookup, navigator, UI, savedsearches, etc. however, when I switched to the app first : go to setting -> macro, then Splunk with gives me internal server error 500, or go to setting -> lookup, Splunk with gives me internal server error 500, or go to setting -> menu -> navigation, Splunk with gives me internal server error 500 if I switch to default search apps first, then go to setting and click the configuration like macro or lookup or menu, then I switch to my project app by drop-down menu, in this case I can edit the content without getting internal server error 500 The Search head is a 4 members search-head cluster, build on Splunk 8.0.2 Linux on CentOS 7 any clue??