All Apps and Add-ons

Why am I getting "Splunk cannot load app "Splunk_TA_box" because it could not find a related app.conf file" error?

mlevsh
Builder

Hi

We have installed Splunk Add-on for Box on an intermediate forwarder via Manage Apps-> Install from file
Now when I'm editing Setup on that add-on, the following error is being logged into web_service.log:
"Splunk cannot load app "Splunk_TA_box" because it could not find a related app.conf file."

This file - app.conf - exists in $SPLUNK_HOME/etc/apps/Splunk_TA_box/local directory.
I've tried to edit Setup on add-on as admin as well, but still getting the same warning as above.

Thank you for any advice

0 Karma

gaetanata16z
New Member

did you ever figure the issue out? I have the same error and can't grant access to Box

thx

0 Karma

rpille_splunk
Splunk Employee
Splunk Employee

The app.conf should be in /default, not local.

0 Karma

sshelly_splunk
Splunk Employee
Splunk Employee

Check the file permissions on that file maybe?

0 Karma

mlevsh
Builder

@sshelly we already have box add-on on our other development server and it worked. So we checked permissions against app.conf (and parent directories) on "working server" and it has the same permissions

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...