Dashboards & Visualizations

Why are dashboards of an app not found on a pooled search head?

tamasmarton
Explorer

I have just configured two search heads in a pool. etc/user and etc/app are on a shared UNC location.
the app/(appname)/search works well.
the app/(appname)/(dashboardname) returns 404 Page not found.

I checked the permissions and shared with app and set to Everyone read and admin for write.
The same "page not found" appears when I create a new dashboard.

When I use the built in search app, then the dashboards display well.

is there any other thing I might missed or is it a restriction that only the buil-in apps can be displayed?

0 Karma
1 Solution

tamasmarton
Explorer

Found the solution. An empty folder with the same name has to be created on local etc/app on every search heads.
It solves the problem. Apps are working fine.

For creating a new app on the search head pool:
1. create an app over the web page
2. it will throw an exception.
3. don't panic!
4. go to the search head's local etc/app folder(it will be on that search head where you the load balancer routed. So it is only on one search head) and move the appname folder to the shared etc/app/ folder
5. create the empty app folder in the local etc/app folder on every search heads.
6. now you can edit and use the new app
7. be happy! 😉

I hope that helps

View solution in original post

tamasmarton
Explorer

Found the solution. An empty folder with the same name has to be created on local etc/app on every search heads.
It solves the problem. Apps are working fine.

For creating a new app on the search head pool:
1. create an app over the web page
2. it will throw an exception.
3. don't panic!
4. go to the search head's local etc/app folder(it will be on that search head where you the load balancer routed. So it is only on one search head) and move the appname folder to the shared etc/app/ folder
5. create the empty app folder in the local etc/app folder on every search heads.
6. now you can edit and use the new app
7. be happy! 😉

I hope that helps

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...