|
Starting from v4.3, splunk shows misleading 404 'Splunk cannot find the "viewName" view' if the view's XML contains an error, while previous Splunk 4 versions were showing a descriptive 500 (internal server error) message similar 'XMLSyntaxError: Opening and ending tag mismatch: view line 1 and module, line 67, column 12' Is it possible to configure 4.3.x to show the verbose message instead of "not found"? |
The verbose message is printed in the web_service.log file
I know it's there. The problem is that the user editing the XML doesn't always have access to the _internal index or the logs.