Troubleshooting¶

Required Permissions¶

The setup page requires users to have the capability “output_file”, to check if you have this role, complete the following steps:

Finding your role¶

1. Click Settings, and select “Users” under “Users and Authentication”
2. View your role by locating your user name
3. Continue on the next step to find the capabilities tied to your role

Finding capability for your role¶

1. Click Settings, and select “Roles” under “Users and Authentication”
2. Locate the role your user has, click Edit>Edit and navigate to the Capabilities tab
3. Enter “output_file” in the filter and ensure output_file is checked

View Detailed Error Message¶

To investigate the issue, a detailed error messages can be found in the console log or displayed on the Setup Page.

To view the Error message in the console log:¶

1. On the setup page, right click and select “Inspect”
2. A window will appear, select the tab “Console”
3. Navigate back to the Setup page and select a framework
4. View Error message in the Console tab (This error is caused the user missing the “output_file” capability, if you generate the same Error message, review Required Permissions)

Possible Error Messages¶

Selected Framework Error: an error occurred running the following search¶

The error occurs when writing to the selected_framework lookup. Ensure the selected_framework_collection is visible in the Splunk Environment

Navigation Bar Error: an error occurred updating the navigation bar¶

The error occurs when an attempt to write to the navigation bar was denied. Ensure the current user has the correct permissions to update the navigation bar

Domain Setup Error: an error occurred running the saved search Domain Family Collection Setup¶

The error occurs when trying to run a saved search. Ensure the current user does not have issues running a saved search.

Manual Setup¶

You may complete the setup manually but completing the following steps in the Manual Setup page

Contact Us¶

While this app is not formally supported, the developer can be reached at mduran@splunk.com. Responses are made on a best effort basis. Feedback is always welcome and appreciated!