topic Re: SentinelOne App for Splunk Error: "cannot unpack non-iterable NoneType object" & Authentication Failed in All Apps and Add-ons

SentinelOne App for Splunk Error: "cannot unpack non-iterable NoneType object" & Authentication Failed (v5.1 & 5.2)

imarri — Fri, 19 Apr 2024 15:22:17 GMT

Having trouble integrating SentinelOne App for Splunk (v5.1 & 5.2) - "cannot unpack non-iterable NoneType object" & Authentication Failed

I'm encountering errors while integrating the SentinelOne App for Splunk on both versions 5.1 and 5.2. I've followed the official documentation (please specify which documentation if available) for API integration and configured everything within the app, including sourcetypes ("activities","threats","Activities","Application"etc).

when searching events for SentinelOne: [I am seeing the following error]

error_message="cannot unpack non-iterable NoneType object" error_type="<class 'TypeError'>" error_arguments="cannot unpack non-iterable NoneType object" error_filename="s1_client.py" error_line_number="496" input_guid="6xxxxxb-8xxxc-e531-e6x8-4xxxaf" input_name="edr-activities"

error_message="[{'code': 4010010, 'detail': None, 'title': 'Authentication Failed'}]" error_type="<class 'management.mgmtsdk_v2.exceptions.UnauthorizedException'>" error_arguments="[{'code': 4010010, 'detail': None, 'title': 'Authentication Failed'}]" error_filename="s1_client.py" error_line_number="188" input_guid="6xxxxx-8xxx-exxx-xxx78-4xxxxxaf" input_name="edr-activities" "

@sentinelone

App - https://splunkbase.splunk.com/app/5433

Re: SentinelOne App for Splunk Error: "cannot unpack non-iterable NoneType object" & Authentication Failed

Nwekemichael — Thu, 06 Jun 2024 07:29:22 GMT

Hi @imarri , I have encountered this error before and I solved it by refreshing the credentials i.e the Api token. try entering a new token and see if it works.

Re: SentinelOne App for Splunk Error: "cannot unpack non-iterable NoneType object" & Authentication Failed

lespinosas — Wed, 03 Jul 2024 23:06:53 GMT

Which is the API Token and URL did you guys use?

I try 2 different and did not have success.

I'm using Splunk Cloud with the App for SentinelOne (not the TA or IA), is that ok?

Regards

Re: SentinelOne App for Splunk Error: "cannot unpack non-iterable NoneType object" & Authentication Failed

Adrenaline_x — Wed, 26 Mar 2025 16:42:52 GMT

Did you resolve this? I'm having the same issue.