I just did an app upgrade for Splunk AD app on Splunk Server 4.3.3. Soon as I did, Splunk AD app fails to function (except search works).
I get a red bar with:
Search operation 'eventtype' is unknown. You might not have permission to run this operation.
SOS says the webservice log errors:
2012-12-03 13:46:35,415 ERROR [50bd1dbb52e54ce10] search:236 - Search operation 'eventtype' is unknown. You might not have permission to run this operation.
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/search.py", line 229, in dispatchJob
job = splunk.search.dispatch(q, sessionKey=cherrypy.session['sessionKey'], **options)
File "/opt/splunk/lib/python2.7/site-packages/splunk/search/init.py", line 282, in dispatch
raise splunk.SearchException, msg['text']
SearchException: Search operation 'eventtype' is unknown. You might not have permission to run this operation.
No clue where to go next, other than revert back to the previous version.
Any suggestions?
Thank you!
... View more