Had a customer whose issue was resolved after adding both ports 8443(reverse proxy) and port 3002(The port splunk web is listening on) to dashboard_html_allowed_domains etc/apps/app_x/default/web.conf dashboard_html_allowed_domains = *.domain.com:xxxx Add the port number at the end of the allowed domains and should work.  ... View more

@wittenst1234 Thank you. These worked great. ... View more

Running Step 6. I was seeing: error while loading shared libraries: libcrypto.so.1.0.0: cannot open shared object file: No such file or directory Basically you are trying to run mongo flat from the file system but the dependencies (like openssl) arent install on the SYSTEM, theyre only installed in SPLUNK. Either the lib file needs to be installed under default path /usr/lib or the LIB path needs to be set as below export LD_LIBRARY_PATH=/opt/splunk/lib/:$LD_LIBRARY_PATH ... View more

Look for the following setting under limits.conf and increase the timeout: render_endpoint_timeout = * The number of seconds after which the pdfgen render endpoint will timeout if it has not yet finished rendering the PDF output * Defaults to 3600 ... View more

There is a new bug filed as bug SPL-122988 for version 6.4.1 of Splunk ... View more

Here is a blog that explains what all the files are for inside the dispatch directory: http://blogs.splunk.com/2012/09/10/a-quick-tour-of-a-dispatch-directory/ ... View more