The quick solution is to go to the CLI on your Search head, and create a $SPLUNK_HOME/etc/apps/sideview_utils/local/app.conf file with the contents below to disable it temporarily and then restart. Splunk will come up and you can then upgrade to the latest version of sideview_utils , live without it, or work with @sideview to fix the problem if it still exists on the latest version (HIGHLY unlikely): [install] state = disabled To avoid some of these kinds of problems in the future, be sure to run the Splunk Platform Upgrade Readiness App app before upgrading: https://splunkbase.splunk.com/app/4698/ ... View more