Weird, my reply disappeared when I added links to the screenshots. Sorry, you'll just have to take my word that I am indeed using the "apps management" page in Splunk 7.1.1 located here:
https://my_splunk_server:8000/en-US/manager/launcher/apps/local
I am clicking the "set up" link for eStreamer eNcore, which links to this URL:
https://my_splunk_server:8000/en-US/manager/TA-eStreamer/apps/local/TA-eStreamer/setup?action=edit
What I receive is a page that says "404 not found" at the top-left of the page, has the image of a horse standing there confused, and the text "Oops. Page not found! Click here to return to Splunk homepage."
I do not see any other page displayed.
I will re-install the TA, as that is a trivial process. Up to this point, all I've had to do is extract the archive, and copy the pkcs12 file into the correct location post-install, and restart Splunk. The next step after that is to log in at the console and click the setup link.
If re-installation nets me any different behavior, I'll post it here in the next 10-15 minutes. Otherwise, my silence will indicate that the app is still broken.
If it makes any difference, this is a brand-new installation of Splunk Enterprise 7.1.1. I have other apps installed and working successfully without issue.
Oops, I forgot to mention, the "setup.xml" file does exist at "/opt/splunk/etc/apps/TA-eStreamer/default/setup.xml"
... View more