All Apps and Add-ons

cisco firewall app UI problem

Gregory_Lapchen
Engager

"404 Not Found

App "Splunk_CiscoFirewalls" does not support UI access. See its app.conf for more information."

Admin user can run the app just fine. Non privileged users get the error above. 'Read' & 'Write' set for 'Everyone', visible enabled.

./etc/apps/Splunk_CiscoFirewalls/local/app.conf

[ui]

is_visible = 1

Any ideas?

0 Karma

mfrost8
Builder

My understanding is that the Splunk for Cisco Firewalls app is intended to be an add on to the Splunk for Cisco Security Suite. According to the README.txt:

The Splunk for Cisco Firewalls add-on
allows you to consume, analyze, and
report on Cisco firewall data for
Cisco ASA, PIX and FWSM firewalls.
This add-on is designed to work with
the Splunk Cisco Security Suite;
install these together to access
reports and dashboards that give you
visual insight into your Cisco
Firewall data.

So you'd want to install the Splunk for Cisco Security Suite app which provides the main screens for Cisco stuff. When the Firewalls app is added, it shows the additional dashboards on the Splunk for Cisco Security Suite app.

The same is true for the other Cisco apps. They mostly are addons to Splunk for Cisco Security Suite.

Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...