topic Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex' in All Apps and Add-ons

500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

gnazer — Tue, 10 Jan 2012 16:18:58 GMT

Hello. I am testing Splunk version 4.3, build 115073 and I have the next error when I want to go to search App

500 Internal Server Error

Return to Splunk home page
AttributeError: 'str' object has no attribute 'os_startIndex'

This page was linked to from http://127.0.0.1:8000/en-US/app/launcher/home.

You are using 127.0.0.1:8000, which is connected to splunkd @115073 at https://127.0.0.1:8089 on Tue Jan 10 13:13:23 2012.

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

booraczeq — Wed, 11 Jan 2012 10:09:46 GMT

I have similar error, displayed as red warning at the top of the screen

-'str' object has no attribute 'os_startIndex'-

ver 4.3, build 115073, WinXP 32-bit

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

andrzejwasilews — Mon, 28 Sep 2020 10:17:52 GMT

Me too, WinXP 32-bit after test upgrade:

500 Internal Server Error

Return to Splunk home page

AttributeError: 'str' object has no attribute 'os_startIndex'
This page was linked to from https://logsrv:8000/en-US/app/search/dashboard_live.

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

lguinn2 — Thu, 12 Jan 2012 02:41:59 GMT

What OS are you using?

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

Livia — Thu, 12 Jan 2012 12:04:53 GMT

Same Problem with Splunk 4.3 on a Win7 64-bit machine
when trying to configurate the "Windows" app.

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

tortuganetworks — Mon, 16 Jan 2012 23:27:44 GMT

Same Problem after upgrading from 4.2 to 4.3 on a Win2008 R2 machine when opening the search app.

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

FRoth — Thu, 19 Jan 2012 09:58:26 GMT

Same problem here.

Windows 2008 R2 Server 64bit.
Upgrade from 4.2.4 to 4.3.

Has anyone resolved this issue somehow?

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

FRoth — Thu, 19 Jan 2012 10:00:56 GMT

Has anyone tried to downgrade again?

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

FRoth — Thu, 19 Jan 2012 10:09:28 GMT

These are the entries in the web_service.log

2012-01-19 10:58:49,927 ERROR   [4f17e959e732440f0] messages:124 - 'str' object has no attribute 'os_startIndex'
Traceback (most recent call last):
  File "D:\Splunk\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\controllers\messages.py", line 81, in index
    entries = splunk.entity.getEntities(uri)
  File "D:\Splunk\Python-2.7\Lib\site-packages\splunk\entity.py", line 159, in getEntities
    offset = int(atomFeed.os_startIndex or -1)
AttributeError: 'str' object has no attribute 'os_startIndex'

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

FRoth — Thu, 19 Jan 2012 12:19:53 GMT

Problem resides in entity.py and has to do with the used "uri" but I cant figure out how to enable debugging

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

FRoth — Thu, 19 Jan 2012 12:51:17 GMT

Workaround:

Rename savedsearches.conf in Splunk\etc\apps\search\local to savedsearches.conf.old
and restart Splunk.

Error Message still appears in the red top bar saying "'str' object has no attribute 'os_startIndex'" but you can access the search app at least.

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

FRoth — Thu, 19 Jan 2012 13:27:56 GMT

IMPORTANT: Every saved search containing a line to schedule the search causes the error. So it is recommended to remove the lines like

"cron_schedule = 0 * * * *" and "enableSched = 1"

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

FRoth — Mon, 28 Sep 2020 10:20:01 GMT

I also noticed that the SAVED SEARCHES did not show correctly in my dashboards. I used "stacked" columns but the graphs did not show up "stacked".

I figured out that I had generate a viewstate for every saved search. I saved a new search and copied the veiwstate for that new and correct chart several times in the file viewstates.conf.

An entry looks like this:

[charting:gvto8fi9]
ChartTypeFormatter_0_7_0.default = column
...
StackModeFormatter_0_10_0.default = stacked
...

The id after "charting:" is the reference to the actual saved search and had to be adjusted in every block.

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

FRoth — Thu, 19 Jan 2012 13:49:09 GMT

He uses a Windows OS. Saved Searches with cron scheduler settings causes this error. See my workaround below.

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

araitz — Fri, 20 Jan 2012 00:04:01 GMT

Here is a workaround for the issue:

From Splunk Web, go to Manager > Your Account
In the Time zone setting, change the "default System Timezone" to a specific timezone
Save the change. No restart is needed and the error should go away

We hope to have this fixed in an upcoming maintenance release.

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

araitz — Fri, 20 Jan 2012 02:01:00 GMT

Please see my answer below for a workaround.

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

mietmesplunk — Mon, 27 Feb 2012 14:15:05 GMT

This is not possible, when you have switched (downgraded) the licence to the coummunity-version, because the Menu "Your Account" is only available in the enterprise version

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

mietmesplunk — Mon, 27 Feb 2012 14:23:28 GMT

I've got the same error "500 Internal Server Error .. AttributeError..." after installing the WindowsApp.
At first, after accessing to the WindowsApp the error was shown.
After reboot i can't acces to splunk (same errer)

Renaming the "savedsearches.conf" brought no success.

(Windows 7, 64bit, Splunk 4.3)

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

FRoth — Mon, 27 Feb 2012 14:28:54 GMT

Which "savedsearches.conf" did you rename (which directory)? Did you restart the service?

Re: 500 Internal Server Error - 'str' object has no attribute 'os_startIndex'

mietmesplunk — Tue, 28 Feb 2012 10:31:15 GMT

I've renamed the "savedsearches.conf" in "Splunk/etc/apps/search/local" (as you wrote above).
And I've rebootet the system.
But without success.

Now i've done the following:

renamed the folder of the app "windows" to "windows-1"

After restart, i had access to the splunk webinterface and splunk seems working well. Of course, the app "windows" is not working.

Do you have any idea, how to get the windows app working?

thanks!