Perhaps there is some other corporate software like an AV extension (or other browser extension/plugin) on the IE/Chrome browser that is blocking the loading of the page? Or maybe there are some kind of javascript/security restrictions on these browsers. The fact that it works for you on Firefox indicates it is likely browser related. I can also confirm it works for me in IE and Chrome. There is some info on the web regarding diagnosing Javascript. This site might be useful: https://codex.wordpress.org/Using_Your_Browser_to_Diagnose_JavaScript_Errors ... View more

Any Javascript errors on IE11 or Chome? Perhaps check F12 in IE to debug....Also maybe try clearing browser cache & cookies? I tested my instance against IE 11 and Chrome... no problems getting to first time setup. ... View more

@mfrost8 - The "Splunk for Windows Infrastucture app" documentation seems to assume the entire environment (SH, IDX, and UVF) is running on windows, so that's why it says put the Add-on everywhere. I also see it does not show the AD components are optional, but I don't see any dependance on this, so don't think they are required. I have a Linux SH and IDX, so I did not install the windows add-on there, only on the windows forwarder, and the Infrastucture app on the SH. So no, I don't think you need it anywhere but your windows forwarders! I also don't have AD or DNS components installed. The App loads fine for me on the linux SH, but it's missing the AD info, which is expected. No weirdness with the interface like you described. It should just open right up to the guided setup. I think you have something else going on with the install of the infrastructure app on your SH, and it's not related to the AD/DNS components not being installed. Perhaps the issue is related to your pooled search heads, and how the app is configured? Could you try deploying the app on just one of your search heads locally to see if that makes a difference? Seems unlikely but maybe worth a try? Another possibility is this is a browser related issue? Could you try different web browsers? You could also look at the logs on your SH to see if you notice anything pertinent when reproducing the behavior. ... View more

@mfrost8 - See my comment below... ... View more

I don't see anything in the "Splunk for Windows Infrastucture app" documentation saying DNS or Active Directory (AD) data is mandatory. I was able to install the "Splunk Add-on for Microsoft Windows" on a windows server acting as a forwarder, and then install "Splunk App for Windows Infrastructure" on a Linux search head (all systems only using IP addresses w/no AD). When installing the "Splunk for Windows Infrastucture app" on the search head, there is a guided setup where you may need to check the "Bypass-Prerequite checks" since you don't have AD data, but you can still go through this useful wizard to detect what data is coming. Once the app is configured and you are in it, I thought the Event Monitoring and Performance Monitoring selections under the Windows drop down were particularly useful. The app does require access to the perfmon, windows, and wineventlog indexes which need to be created for the add-on. This means, under settings > access controls > roles, these indexes need to be added under "Indexes searched by default", and the user needs to log out and log back in. ... View more