We recently installed the Splunk App for Windows Infrastructure in our Splunk test environment, but when we go to it, we get a "Page Not Found!" error
Any help with this issue would be appreciated, thanks.
There may be an error the nav configuration.
Click Apps in the top left > manage apps
Find "Splunk App for Windows Infrastructure" and click "View objects"
Look for the item named "default". The config type is "nav". Click on the name, "default".
Change the second line from
<view name="default" default="true"/>
to
<view name="infra_home" default="true"/>
Hit save and wait a few minutes. It should take you to the correct default page after that.
This fixed my problem too. Thanks
I didn't realize how old this question actually was. I wound up having the same issue as the poster and fixed it with the above. Hopefully it'll help someone in the future.
While it's an oldie, it still applies toe the latest version of the app. This helped me to resolve the same issue. Thanks!!! , I upvoted.
Check if windows admin is added to the account role.
you can partially work around this. its an issue only with the "overview" page.
go directly to another tab in the app and it works:
http://localhost:8000/en-US/app/splunk_app_windows_infrastructure/reports
not sure why "overview " is broke. but it is for me as well obviously. if you find a solution, please post.
in my production environment, it looks like we had made edits to the default page through the local folder.
following the instructions to manually update the app, and removing the local folder resolved this issue.
upon launch we re-ran the initial setup which recreated the local folder and most of the content that was not custom (not our files that were removing specific event IDs etc). and the app now works normally.
Following the advice of @zkrieger
I deleted the local folder in etc\apps\splunk_app_windows_infrastructure , restarted Splunk, and relaunched the app.
After running through the setup again everything seems to be working.
I noticed that "Browse More Apps" isn't working in our test environment either. When we go there we get this error: ⚠ Error connecting: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
I am wondering if the issue is with accessing web-based content. Both items were working in the past, but I haven't been able to track down what changed other than an upgrade of Splunk.
What version of Splunk Enterprise and the app are you running?
In prod where it is working 6.2.2
In test where it isn't 6.4.2.
I am fairly certain it was working in test after the upgrade though.