https://community.splunk.com/t5/Deployment-Architecture/Cloud-splunk-S3-bucket-Failed-to-collect-s3-data/m-p/277105#M21828 <P>We are having this same issue. Was anyone able to make progress on this.</P> Wed, 11 Jan 2017 17:16:57 GMT ejenson_splunk 2017-01-11T17:16:57Z https://community.splunk.com/t5/Deployment-Architecture/Cloud-splunk-S3-bucket-Failed-to-collect-s3-data/m-p/277104#M21827 <P>Hi all , <BR /> I have configured my splunk- aws add on and aws app . But I am getting the following error in /opt/splunk/var/log/splunk/splunk_ta_aws_s3_main.log -</P> <P>ERROR pid=16834 tid=MainThread file=aws_s3.py:run:132 | Failed to collect s3 data, error=Traceback (most recent call last):<BR /> File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/aws_s3.py", line 129, in run<BR /> _do_run()<BR /> File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/aws_s3.py", line 100, in _do_run<BR /> asconfig.AWSS3Conf, "aws_s3", logger)<BR /> File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/taaws/ta_aws_common.py", line 117, in get_configs<BR /> tasks = conf.get_tasks()<BR /> File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/s3_mod/aws_s3_conf.py", line 73, in get_tasks<BR /> task[asc.initial_scan_datetime])<BR /> File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/s3_mod/aws_s3_conf.py", line 91, in _get_last_modified_time<BR /> scan_datetime)<BR /> File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/taaws/ta_aws_common.py", line 182, in parse_datetime<BR /> r = endpoint.get(time=time_str, output_time_format="%s")<BR /> File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/splunklib/client.py", line 688, in get<BR /> **query)<BR /> File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/splunklib/binding.py", line 237, in wrapper<BR /> return request_fun(self, *args, **kwargs)<BR /> File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/splunklib/binding.py", line 61, in new_f<BR /> val = f(*args, **kwargs)<BR /> File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/splunklib/binding.py", line 582, in get<BR /> response = self.http.get(path, self._auth_headers, **query)<BR /> File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/splunklib/binding.py", line 1053, in get<BR /> return self.request(url, { 'method': "GET", 'headers': headers })<BR /> File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/splunklib/binding.py", line 1108, in request<BR /> raise HTTPError(response)<BR /> HTTPError: HTTP 400 Bad Request -- Invalid time.</P> <P>I have given proper bucket policies to my s3 bucket.</P> <P>Any pointers will be appreciable.</P> Tue, 29 Sep 2020 10:58:36 GMT https://community.splunk.com/t5/Deployment-Architecture/Cloud-splunk-S3-bucket-Failed-to-collect-s3-data/m-p/277104#M21827 mshruti 2020-09-29T10:58:36Z https://community.splunk.com/t5/Deployment-Architecture/Cloud-splunk-S3-bucket-Failed-to-collect-s3-data/m-p/277105#M21828 <P>We are having this same issue. Was anyone able to make progress on this.</P> Wed, 11 Jan 2017 17:16:57 GMT https://community.splunk.com/t5/Deployment-Architecture/Cloud-splunk-S3-bucket-Failed-to-collect-s3-data/m-p/277105#M21828 ejenson_splunk 2017-01-11T17:16:57Z