Splunk cloud issues about search_catalog HOT 6 CLOSED

Hi @fraserc182, full disclosure I am not a Splunk Cloud user so I can't speak 100% to that experience. I just updated recently the app so I'm not sure how long it takes Splunk to vet for Cloud.

The app doesn't by default create lookup tables so that an upgrade will not destroy any existing data. The refresh button is taking advantage of the entity refresh (in this case for the views and nav) Splunk makes available on a Splunk host (/debug/refresh?entity=/data/ui/views&entity=/data/ui/nav) but perhaps doesn't allow this on Cloud. I will need to research if there is any other method of accomplishing this (maybe a REST call?).

from search_catalog.

Hi,

Thanks for getting back to me. I know it's a tall order to ask you for help on this so I appreciate any input you may have about it. The app is exactly what I am looking for now we're expanding splunk to other departments and users.

Thanks again for looking into it!

Cheers.

from search_catalog.

@fraserc182 I have not been able to find much info related to Splunk Cloud and refreshing the nav and views. The documentation about refreshing can be seen here https://dev.splunk.com/enterprise/tutorials/quickstart/changenavigation/ but there is no mention of Splunk Cloud. It might be that the only method available to you is a restart which is not ideal. However there is documentation suggesting that support is able to open certain features of Cloud to specific ip ranges (such as what is seen in the API documentation https://docs.splunk.com/Documentation/SplunkCloud/latest/RESTTUT/RESTandCloud). Given this information I would suggest opening a support case with Splunk and showing them the first link I posted and ask if they can allow this ability on your instance to your IP range or if they have an alternative (to restarting). If you do open the support ticket please post back the results.

from search_catalog.

Hi,

Thanks for the comment, apologies for the late response.
I've just opened this with splunk support and I will let you know what they come back. If they say it's not possible I will just close this issue off.
Thanks for all your help.

from search_catalog.

Hi @geekusa, I got a response from the support team who have said that this is not something they would be able to help with unfortunately. So looks like there is no solution currently!

Thanks again for all your help on this, very much appreciate it.

from search_catalog.

Sorry to hear that @fraserc182, though I do want to note that a restart is still a viable -- albeit not ideal -- option. Thanks for trying the support path though.

from search_catalog.