After upgrading Splunk, why is the "View Capabilities" page missing & 404 error?

[moorvogi]

We upgraded our Splunk and found that when you click on "view capabilities" for a user in the AccessControls >> Users page it'll take you to a great picture of buttercup 404. Does anyone know what to restore to fix this?

[harsmarvania57]

It will be good if you will provide information about Splunk version (from which version you upgraded to which version) ? Platform ? And are you getting any error in $SPLUNK_HOME/var/log/splunk/web_service.log when trying to access "View Capabilities" page ?

[mstjohn_splunk]

@moorvogi,

I'm glad you found an answer to your problem! Would you mind giving us some more details about your issue and how you solved it? Upgrade versions, etc. It would go a long way to helping future users who have similar issues. Thanks!

[moorvogi · Accepted solution]

Found the problem. Solution is... dont change the defaults of search app.. and other things... and when in doubt, restore the defaults...

[harsmarvania57]

Yes, not only search app but do not modify any configuration in any default directory otherwise it will overwrite when you upgrade splunk.

As you already found the problem and solution, you can accept your own answer.