topic Re: Qualys Technology Add-on (TA) for Splunk: Why are we getting "Error while posting to url=/servicesNS/nobody.../setupentity" during setup? in All Apps and Add-ons

Qualys Technology Add-on (TA) for Splunk: Why are we getting "Error while posting to url=/servicesNS/nobody.../setupentity" during setup?

srinathd — Wed, 06 Jul 2016 09:18:14 GMT

While trying to setup TA-QualysCloudPlatform, I'm getting the below error. I have the correct proxy and the Qualys server details set up.

Encountered the following error while trying to update: In handler 'localapps': Error while posting to url=/servicesNS/nobody/TA-QualysCloudPlatform/qualys/qualys_configure/setupentity

Why it is giving this error and how to resolve this?

Re: Qualys Technology Add-on (TA) for Splunk: Why are we getting "Error while posting to url=/servicesNS/nobody.../setupentity" during setup?

prabhasgupte — Mon, 26 Sep 2016 12:28:06 GMT

Do you see any error being reported in _internal index (or anywhere else)?

Re: Qualys Technology Add-on (TA) for Splunk: Why are we getting "Error while posting to url=/servicesNS/nobody.../setupentity" during setup?

prabhasgupte — Mon, 26 Sep 2016 13:43:57 GMT

As a second thought, have you tried deleting app.conf, qualys.conf from your /local directory, then restarting the Splunk and then trying to set it up again?

Re: Qualys Technology Add-on (TA) for Splunk: Why are we getting "Error while posting to url=/servicesNS/nobody.../setupentity" during setup?

prabhasgupte — Wed, 23 Nov 2016 05:40:50 GMT

There's a new version 1.1.0 of Qualys TA for Splunk available in Splunkbase. I would suggest you upgrade to that. There's a major difference between 1.1.0 and earlier versions regarding how the API credentials are stored. That would help you get rid of this error.

Re: Qualys Technology Add-on (TA) for Splunk: Why are we getting "Error while posting to url=/servicesNS/nobody.../setupentity" during setup?

justinbarta — Tue, 06 Jun 2017 19:34:27 GMT

I'm on 1.1.0 and have this error.

Any suggestions?

Re: Qualys Technology Add-on (TA) for Splunk: Why are we getting "Error while posting to url=/servicesNS/nobody.../setupentity" during setup?

justinbarta — Tue, 06 Jun 2017 20:09:15 GMT

This worked for me. Deleting the conf files, restarting, and resetting up the app Worked !!
I did not need to reinstall.
Thank you

Re: Qualys Technology Add-on (TA) for Splunk: Why are we getting "Error while posting to url=/servicesNS/nobody.../setupentity" during setup?

justinbarta — Wed, 11 Oct 2017 18:33:36 GMT

FYI this still occurred with 1.1.0 and still occurs with 1.2.3.

Qualys requires a password changed every 60-90 days.
Each time I'm forced to delete the the conf files and re-setup the app.

Re: Qualys Technology Add-on (TA) for Splunk: Why are we getting "Error while posting to url=/servicesNS/nobody.../setupentity" during setup?

TonyLeeVT — Thu, 19 Oct 2017 17:59:22 GMT

Similar to justinbarta, this is what worked for me:

0) Make a note of the settings that are currently working from the TA setup page (I copy and pasted it into Word)

1) Delete or move to a temp directory, the config files in: $SPLUNK_HOME$/etc/apps/TA-QualysCloudPlatform/local
(app.conf and qualys.conf)

2) Restart Splunk

3) Enter information in TA setup page again with new credentials

Re-installation of the TA was not needed.

Re: Qualys Technology Add-on (TA) for Splunk: Why are we getting "Error while posting to url=/servicesNS/nobody.../setupentity" during setup?

stoomart — Wed, 20 Feb 2019 16:58:15 GMT

I only needed to rename the passwords.conf file and restart the service to update the password:

$SPLUNK_HOME$/etc/apps/TA-QualysCloudPlatform/local/passwords.conf