Why the TA(splunk_connect_for_zoom) is not available on UI after installing through Deployment Server

Applicability

Description

The TA(splunk_connect_for_zoom) is not available on Web UI after being installed through Deployment Server

Investigation

1. From splunkd.log, app=splunk_connect_for_zoom is installed by DS

08-12-2024 02:35:28.729 -0700 INFO  loader [1077642 MainThread] - Splunkd starting (build b6b9c8185839).
08-12-2024 02:37:18.924 -0700 INFO  DeployedApplication [1078076 HttpClientPollingThread_BA8AA552-3603-40A5-A2D9-DC0A72F24BB4] - Installing app=splunk_connect_for_zoom to='/opt/splunk/etc/apps/splunk_connect_for_zoom'
08-12-2024 02:37:18.984 -0700 INFO  ApplicationManager [1078076 HttpClientPollingThread_BA8AA552-3603-40A5-A2D9-DC0A72F24BB4] - Detected app creation: splunk_connect_for_zoom

       2. From configuration.xml of the TA, templates/base.html should be involved by app=splunk_connect_for_zoom UI 

$ cat ../etc/apps/splunk_connect_for_zoom/default/data/ui/views/configuration.xml
<?xml version="1.0" ?>
<view isDashboard="False" template="splunk_connect_for_zoom:/templates/base.html" type="html">
    <label>Configuration</label>
</view>

     3. From splunkd.log and web_service.log, it is failed to locate the template "templates/base.html", that is why there is "Not Found" errors on UI

08-12-2024 03:41:25.491 -0700 INFO  UiAppServer [1078445 appserver-stderr] - From appserver: ERROR:splunk.appserver.controllers:Unable to obtain template "splunk_connect_for_zoom:/templates/base.html": 
08-12-2024 03:41:25.491 -0700 INFO  UiAppServer [1078445 appserver-stderr] - From appserver: TopLevelLookupException: Splunk has failed to locate the template for uri 'splunk_connect_for_zoom:/templates/base.html'.
2024-08-12 03:41:25,491 ERROR   [66b9e6d55e7f0d545f6610] __init__:353 - Unable to obtain template "splunk_connect_for_zoom:/templates/base.html": 
TopLevelLookupException: Splunk has failed to locate the template for uri 'splunk_connect_for_zoom:/templates/base.html'.

     4. Actually the base.html does exist, the splunk instance should be restarted manually after app installed. 

$ ls -rlt  ../etc/apps/splunk_connect_for_zoom/appserver/templates/base.html 
-rwxr-xr-x 1 support support 1518 Aug 12 09:37 ../etc/apps/splunk_connect_for_zoom/appserver/templates/base.html

Resolution

Based on the installation guide, the splunk instance should be restarted manually after app installed