Splunk App for Windows Infrastructure Setup Wizard does not display

[myfriendhenry]

I installed the windows app and then the Splunk App for Windows Infrastructure. When I launch the Splunk App for Windows Infrastructure, the setup wizard is supposed to display but all I get is a blank screen. Tried IE and Firefox, added Java exceptions and security exceptions.

[malmoore]

The problem likely occurs as a result of a MIME type mismatch.

Because the Splunk App for Windows Infrastructure uses Django, the app looks in the mime.types file on the OS for information on how to deal with the MIME types of the files it uses to display the config page (as well as some dashboards.)

The config.js file reports itself as being of type text/js which is what you see in the error message. It should instead be application/javascript.

This is a bug that we plan to fix in a future version of Splunk Enterprise. In the meantime, to work around the problem, use the Firefox browser, or complete the following procedure:

1. On the host that runs Splunk Enterprise, open /etc/apache2/mime.types for editing. The location might differ based on your operating system.
2. Confirm that there is a line like the following that is present: application/javascript js. If there is not, add it.
3. If there is an entry that begins with text/js, comment it out by inserting a # (hash) at the beginning of the line.
4. Save the file and close it.
5. Reload the app and try the first time setup again.

We have identified this to be an issue in the core Splunk Enterprise product and will fix it in a future version of the product.

[thomasaporter]

I downvoted this post because this solution works only for rhel. the windows install only shows anything close to this type of file in the python library.

[motkarnaresh]

can you please tell where I can find the mime.types file in windows? or any other solution for it?

[malmoore]

Hi,

There isn't a file like that in Windows.

However, you might have some luck by adding an entry in the Registry.

This is a WILD GUESS, and I DO NOT PRESUME OR GUARANTEE THAT IT WILL WORK. Take all kinds of precautions before performing this task.

1. Open Registry Editor.
2. Browse to the HKEY_CLASSES_ROOT\MIME\Database\Content Type location.
3. Add a new key at that location, exactly as shown: application/javascript
4. In this new key, create a new String value: Extension
5. Set the value of that entry to .js
6. Close Registry Editor.

I believe that web browsers on Windows read these entries. If my theory is correct, then this should fix the problem on Windows systems.

Good luck! I'll post it as an answer if it does work and delete this comment if it doesn't. :)))))

[thomasaporter]

Follow up to previous post. Enabled developer logging in Firefox, then opened Splunk and clicked on the Add-on for Windows Setup. Found the following javascript errors:

SyntaxError: unterminated string
TypeError: Splunk.Module is undefined.

[thomasaporter]

Same issue here.......running Splunk 3.3.2 with Add-on for Windows 4.8.3. Tried both the latest IE and Firefox, but no go. The above workaround does not seem to apply to me. I have Splunk 3.3.2 installed on a Windows 2012 box. The mimetypes files are in the Python library. I confirm I do have the application/javascripts.......jss, and not text/js entry.

[mbenwell]

Had the issue with Windows app too running on SLES and Splunk Enterprise 6.4.2

Warning: I don't know the flow on effects of changes to mime-types so I don't know the broader impact of this. But along the lines of @malmoore suggestion I commented out the line:

text/x-js js

in the file

/etc/mime-types

and restarted Splunk and the app worked

RHEL doesn't have 'text/x-js js' in /etc/mime-types so I guess that explains why it only seems to present as an issue on SLES

[malmoore]

What version of Splunk Enterprise are you running?

There was a bug that caused pages not to display after an upgrade to Splunk 6.2 but this was fixed in version 1.1.1. Can you confirm that you are running the latest version of Splunk and the Splunk App for Windows Infrastructure? Thanks.

[thomasaporter]

Tried all of the workarounds listed above. Currently deploying Splunk ESS App 3.3.2 with Splunk 6.4.2 and Add-on for WIndows 4.8.3. All I get when clicking on the app is a set up web page with a small window showing the upper part of the setup screen. I cannot display the entire setup screen, and the screen within the window contains no scroll bars. If I use my mouse to select the contents of the setup screen and drag down, the setup screen will scroll through to the bottom, but that's about it. I cannot even use the arrow keys to affect the scrolling. There seems to be no way for me to set the input focus on to the setup window.

[djfangGR]

Same here, I'm running Splunk 6.3.3 with Win Infrastructure App version 1.2.0

[malmoore]

Hey guys, have you tried kicking off the process from the Tools > Guided Setup menu?

Also, have you reviewed splunkd.log to see if there are any errors that the app generates?

[djfangGR]

I tried various ways of attempting to access the guided setup menu. However in Chrome and IE, I get the following error messages in console:

Refused to execute script from 'https://xxxxxxx:8000/dj/static/js/build/splunkjs.min/config.js' because its MIME type ('text/x-js') is not executable, and strict MIME type checking is enabled.
xxxxxxx/:220 Uncaught ReferenceError: require is not defined
xxxxxxx/:230 Uncaught ReferenceError: require is not defined
xxxxxxx/:237 Uncaught ReferenceError: requirejs is not defined

The only browser that worked for me is Firefox, was able to go ahead with the installation and use the app. Anyone else experiencing the same issue?

In splunkd.log I did not see any errors related to the app, only warnings of the following:

/opt/splunk/etc/apps/splunk_app_windows_infrastructure/lookups/windows_services_service.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
/opt/splunk/etc/apps/splunk_app_windows_infrastructure/lookups/windows_processes_system.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
/opt/splunk/etc/apps/splunk_app_windows_infrastructure/lookups/windows_services_system.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
...

[malmoore]

Thank you for this bit of information.

I will run this by our engineers and see what they say. If you haven't already, please file a support case, it makes investigating and resolving this kind of stuff happen a lot faster.

[djfangGR]

Thanks, just created a support case and referenced this post in my case. Will let you know if I hear anything back from them.

[malmoore]

Thanks @dfangGR,

Looks like it's a problem with Splunk Enterprise and how it handles MIME types. I'm going to make my update an official Answer to this particular question, and update the release notes in the Windows Infra docs. There is a workaround which I will detail in the answer.

Basically, the problem is a MIME type mismatch. The reason why you got it to work in Firefox is because that browser is not as strict as others are at checking MIME types.

Apologies for the frustration on this.

[djfangGR]

Thanks for looking into this, will report back if I encounter further issues.

Cheers!

[spleval]

I have installed splunk-6.2.2-255606-x64-release and I am also getting a blank webpage both in Firefox and IE. I could not spot any error in the logs. Is this issue really fixed? Thank you.

[scwood]

Has this issue been resolved for you? I'm running version 6.2.4-271043, and the splunk app for windows still does not display.

Thanks.

[banderson7]

Happening to me on splunk 6.1.5