Splunk Dev

App Development - Setup.xml not found

Drainy
Champion

Through some app development I am currently doing I have discovered a really annoying issue that hopefully someone may be able to shed some light on.

I have packaged the app as a tar.gz and included a setup.xml as there is some configuration required before the app can correctly function.
However, when installing the app from file it successfully installs, asks to setup and then re-directs to a 404 local/app/setup not found.

After spending an age trying to figure out why this wasn't working I tried a restart, after a restart it started working? Suddenly I can go to the app, click on the redirect to setup and the screen loads and works as expected.

To test if this was a one-off or some other strange behavior I did a wipe and clean install of the app 5+ times to verify that I wasn't going crazy.

Why is Splunk requiring a restart for a first time app install to view / locate the setup xml correctly?

Edit: Version 4.2.5

Spelunke
Path Finder

I also observe this behavior with some apps from splunkbase: First setup fails, later it works…

So it looks like a more general issue?

0 Karma

Genti
Splunk Employee
Splunk Employee

@Spelunke and @Draineh - Do you guys have exact reproduction steps? Also, please provide the one app that seems to always act like this for you. We'll try to repro it inhouse and create a bug if it indeed is one. Cheerio!

0 Karma

Drainy
Champion

@spelunke thanks

0 Karma

Spelunke
Path Finder

using version 4.2.5, build 113966

0 Karma

Drainy
Champion

What version of Splunk are you running?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...