Installation

Splunk cannot find the "flashtimeline" view. 4.3

praveenvemuri
Explorer

removed splunk rpm 4.2.5 and installed splunk 4.3 and applied license. when i tried to search. it is giving 404 not found

Splunk cannot find the "flashtimeline" view.

permissions were global on flastimeline view. please let me know how can i start searching again.

Tags (2)

mzax
Splunk Employee
Splunk Employee

This error appears when there was no migration or it failed during the upgrade process.

Workaround is to force migration to correct the issue. From $SPLUNK_HOME :

./bin/splunk stop
touch ftr
./bin/splunk start

jrodman
Splunk Employee
Splunk Employee

Based on the information presented, and scavenged from a few reports, this problem seems to be a packaging or migration error on our (Splunk's) part. I currently have not investigated.

Please do engage Splunk Support for this problem: http://www.splunk.com/support

It seems doubtful it affects all upgraders based on the number of reports, so capturing the details of this upgrade would be helpful. That includes:

  • Your operating system and version
  • The version of Splunk previously installed
  • The architecture of your system (x86, amd64, sparc, etc)
  • The precise package you used to upgrade (filename of the rpm, tar.gz, msi etc)

This may require gathering of diags as they exist post-install to figure out. Pre-upgrade configuration state may be quite helpful.

tracyr10
Engager

I ended up stopping the services, backing up my splunk directory, uninstalling it completely, then reinstalling and copying over the databases and the etc directory. This worked, but not the most efficient upgrade path.

acewiza
New Member

same here - 4.3 broke something

0 Karma

gsdffox
New Member

I am also have this problem,how can fix this problem?

0 Karma

tracyr10
Engager

I did an upgrade from 4.2 to 4.3, and from the Search app, if I click on anything to drill down further, I get the same error. Please advise.

Thanks

0 Karma

praveenvemuri
Explorer

Hi Draineh, Thanks for responding. I deleted the rpm but didnt clear the installed folder. I deleted it again. moved the installation folder and installed it again. its working fine now.

0 Karma

Drainy
Champion

How are you trying to access the flashtimeline? Can you edit your question with the URL you are using, if you verified that the previous install was cleared successfully first?
If its a clean install it should be accessible.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...