<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic S3 Could not find access_key and/or secret_key in a configuration file- How to solve this error? in Splunk Enterprise</title>
    <link>https://community.splunk.com/t5/Splunk-Enterprise/S3-Could-not-find-access-key-and-or-secret-key-in-a/m-p/586236#M11650</link>
    <description>&lt;P&gt;Hello all,&lt;/P&gt;
&lt;P&gt;I'm trying to connect my indexer cluster to an on premise s3 storage.&lt;/P&gt;
&lt;P&gt;I'm using the master node to do it.&lt;/P&gt;
&lt;P&gt;I've tested the access credentials with a standalone instance outside my cluster and it works.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Now, I'm trying to use 2 different apps to declare volume and index.&lt;/P&gt;
&lt;P&gt;Like this :&lt;/P&gt;
&lt;DIV class=""&gt;
&lt;DIV class=""&gt;&lt;LI-CODE lang="markup"&gt;.../master-apps/common_indexers/local/indexes.conf #volume stanza

[volume:bucket1]
storageType = remote
path = s3://bucket1
remote.s3.endpoint = https://mys3.fr
remote.s3.access_key = xx
remote.s3.secret_key = xx
remote.s3.signature_version = v2
remote.s3.supports_versionning = false
remote.s3.auth_region = EU

.../master-apps/common_indexes/local/indexes.conf #index stanza
[index1]
homePath = $SPLUNK_DB/$_index_name/db
thawedPath = $SPLUNK_DB/$_index_name/thaweddb
coldPath = $SPLUNK_DB/$_index_name/colddb
remotePath = volume:bucket1/$_index_name&lt;/LI-CODE&gt;&lt;/DIV&gt;
&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class=""&gt;&lt;SPAN&gt;&lt;SPAN class=""&gt;&lt;SPAN class=""&gt;When validating bundle, I have this error :&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV class=""&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;bundle_validation_errors on peer&amp;gt; [Critical] Unable to load remote volume "bucket1" of scheme "s3" referenced by index "index1": Could not find access_key and/or secret_key in a configuration file [Critical] in environment variables or via the AWS metadata endpoint.&lt;/LI-CODE&gt;&lt;/DIV&gt;
&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class=""&gt;I don't understand what is wrong...&lt;/DIV&gt;
&lt;DIV class=""&gt;File precedence is respected. =&amp;gt; ie volumes are read before indexes&lt;/DIV&gt;
&lt;DIV class=""&gt;I verified that splunk is owner of files and has correct access to the files.&lt;/DIV&gt;
&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class=""&gt;I'm out of ideas.&lt;/DIV&gt;
&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class=""&gt;Thank you in advance for your suggestions.&lt;/DIV&gt;
&lt;DIV class=""&gt;Regards,&lt;/DIV&gt;
&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class=""&gt;Ema&lt;/DIV&gt;
&lt;/DIV&gt;</description>
    <pubDate>Thu, 24 Feb 2022 14:38:37 GMT</pubDate>
    <dc:creator>emallinger</dc:creator>
    <dc:date>2022-02-24T14:38:37Z</dc:date>
    <item>
      <title>S3 Could not find access_key and/or secret_key in a configuration file- How to solve this error?</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/S3-Could-not-find-access-key-and-or-secret-key-in-a/m-p/586236#M11650</link>
      <description>&lt;P&gt;Hello all,&lt;/P&gt;
&lt;P&gt;I'm trying to connect my indexer cluster to an on premise s3 storage.&lt;/P&gt;
&lt;P&gt;I'm using the master node to do it.&lt;/P&gt;
&lt;P&gt;I've tested the access credentials with a standalone instance outside my cluster and it works.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Now, I'm trying to use 2 different apps to declare volume and index.&lt;/P&gt;
&lt;P&gt;Like this :&lt;/P&gt;
&lt;DIV class=""&gt;
&lt;DIV class=""&gt;&lt;LI-CODE lang="markup"&gt;.../master-apps/common_indexers/local/indexes.conf #volume stanza

[volume:bucket1]
storageType = remote
path = s3://bucket1
remote.s3.endpoint = https://mys3.fr
remote.s3.access_key = xx
remote.s3.secret_key = xx
remote.s3.signature_version = v2
remote.s3.supports_versionning = false
remote.s3.auth_region = EU

.../master-apps/common_indexes/local/indexes.conf #index stanza
[index1]
homePath = $SPLUNK_DB/$_index_name/db
thawedPath = $SPLUNK_DB/$_index_name/thaweddb
coldPath = $SPLUNK_DB/$_index_name/colddb
remotePath = volume:bucket1/$_index_name&lt;/LI-CODE&gt;&lt;/DIV&gt;
&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class=""&gt;&lt;SPAN&gt;&lt;SPAN class=""&gt;&lt;SPAN class=""&gt;When validating bundle, I have this error :&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV class=""&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;bundle_validation_errors on peer&amp;gt; [Critical] Unable to load remote volume "bucket1" of scheme "s3" referenced by index "index1": Could not find access_key and/or secret_key in a configuration file [Critical] in environment variables or via the AWS metadata endpoint.&lt;/LI-CODE&gt;&lt;/DIV&gt;
&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class=""&gt;I don't understand what is wrong...&lt;/DIV&gt;
&lt;DIV class=""&gt;File precedence is respected. =&amp;gt; ie volumes are read before indexes&lt;/DIV&gt;
&lt;DIV class=""&gt;I verified that splunk is owner of files and has correct access to the files.&lt;/DIV&gt;
&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class=""&gt;I'm out of ideas.&lt;/DIV&gt;
&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class=""&gt;Thank you in advance for your suggestions.&lt;/DIV&gt;
&lt;DIV class=""&gt;Regards,&lt;/DIV&gt;
&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class=""&gt;Ema&lt;/DIV&gt;
&lt;/DIV&gt;</description>
      <pubDate>Thu, 24 Feb 2022 14:38:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/S3-Could-not-find-access-key-and-or-secret-key-in-a/m-p/586236#M11650</guid>
      <dc:creator>emallinger</dc:creator>
      <dc:date>2022-02-24T14:38:37Z</dc:date>
    </item>
    <item>
      <title>Re: S3 Could not find access_key and/or secret_key in a configuration file- How to solve this error?</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/S3-Could-not-find-access-key-and-or-secret-key-in-a/m-p/586385#M11668</link>
      <description>&lt;P&gt;Any idea ? Anyone ?&lt;/P&gt;</description>
      <pubDate>Thu, 24 Feb 2022 09:39:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/S3-Could-not-find-access-key-and-or-secret-key-in-a/m-p/586385#M11668</guid>
      <dc:creator>emallinger</dc:creator>
      <dc:date>2022-02-24T09:39:03Z</dc:date>
    </item>
    <item>
      <title>Re: S3 Could not find access_key and/or secret_key in a configuration file- How to solve this error?</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/S3-Could-not-find-access-key-and-or-secret-key-in-a/m-p/587189#M11728</link>
      <description>&lt;P&gt;Ok, Here's the answer :&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;The access_key need to be encrypted on each indexer separately after disribution with cluster master.&lt;/P&gt;&lt;P&gt;So it only seems to work if you first write it on the master "clear", then apply the bundle.&lt;/P&gt;</description>
      <pubDate>Wed, 02 Mar 2022 10:52:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/S3-Could-not-find-access-key-and-or-secret-key-in-a/m-p/587189#M11728</guid>
      <dc:creator>emallinger</dc:creator>
      <dc:date>2022-03-02T10:52:11Z</dc:date>
    </item>
  </channel>
</rss>

