All-in-one Splunk Enterprise 6.4.3 on RHEL 6. Installed Splunk App for Jenkins 1.0.1. No Jenkins master connections yet. When viewed with the Chrome (53.x) browser, all the pages of the SA for Jenkins app the entire page looks like basic text with links and a few images. This includes the standard Splunk menu of (pardon my text representation) splunk> User v Messages v Settings v Activity v Help v If I go back to the main Splunk home, then the buttons and colors are present so the problem is only in the SA for Jenkins App. Apparently there is a warning in the Chrome address bar that the stylesheet is loading scripts from non-https sources. (I have Splunk as an https site.) Here is a message when I follow the messages in Chrome Mixed Content: The page at 'https://splunk.mydomain.com/en-US/app/splunk_app_jenkins/overview' was loaded over HTTPS, but requested an insecure stylesheet 'http://splunk.mydomain.com/en-US/static/js/contrib/select2-3.4.6/select2.css'. This content should also be served over HTTPS. If I do allow mixed content by clicking on the warning in Chrome, then the SA for Jenkins shows with colors and visuals. In the IE 11 browser, I see the SA for Jenkins with colors and visuals from the start. Can the SA for Jenkins honor the https access to get its content? Note: I don't have https all the way through to the Splunk server. I terminate https at a load balancer and then pass http to the Splunk server. No other apps cause this mixed-content warning. ... View more

The learned app is creating objects owned by "nobody". This creates logged error messages about ERROR AuthenticationManagerLDAP - Could not find user="nobody" with strategy="??????"" (????? is my own...) I can find these with: find ./ -name local.meta -exec grep -H 'nobody' {} \; and they are coming from the learned app. I guess I would like to assign them to "admin" and have learned create further new sourcetypes with owner=admin. I can reassign existing ones with find ./ -name local.meta -exec sed -i 's/owner = nobody/owner = admin/g' {} \; How do I get future learned sourcetypes to default the owner to admin? (If defaulting the ownership to admin isn't good then please point out why and I will choose a different default user.) ... View more