Hey Splunkers,
I just did the upgrade to splunk 5.0.6. And I got this message on my searchhead:
App "sausageApp" has an overriding copy of the "flashtimeline.xml" view, thus the new version may not be in effect. location=/opt/splunk/etc/apps/sausageApp/default/data/ui/views
Now I am wondering: Where is the new version of "flashtimeline.xml" ? So I can overwrite mine to be fully upgraded?
Best Regards and Thanks,
Markus
Hi mstegmueller,
quickest approach, do a SSH login to your Splunk server and search for it:
find /opt/splunk -name flashtimeline.xml -exec ls -la {} \;
and replace yours with the newest one found.
hope this helps ...
cheers, MuS
Is the flashtimeline.xml file is set as global withing sausageApp?? The one within search app is global, so that might be causing the conflict.
IIRC, apps layer on alphabetically, so Splunk is reporting that sausageApp's version of flashtimeline is taking precedence over the default one in search.
other question, why do use a flashtimeline.xml in your app if it is the same as in the search app?
Hi MuS,
Thanks for your quick answer. But I already thought about that. Anyway, I used your string in the obvious result was:
-r--r--r-- 1 splunk splunk 13059 2013-11-08 02:45 /opt/splunk/etc/apps/search/default/data/ui/views/flashtimeline.xml -r--r--r-- 1 splunk splunk 13059 2013-11-21 10:45 /opt/splunk/etc/apps/sausageApp/default/data/ui/views/flashtimeline.xml
So somehow this still seems to be newer (even though, it isn't). I already thought that the search app should have the most recent version, but wasn't sure about it. Can someone confirm this?
Best Regards, Markus