topic Re: not able to connect to splunk web console in Getting Data In

not able to connect to splunk web console

skr — Wed, 28 Jul 2021 15:08:46 GMT

I am not able to connect to splunk web console using python sdk getting timedout error , I am suspecting port is not allowing, Could you please help

my code

--------------------------

import sys

import getpass

sys.path.append('splunk-sdk-python-1.6.16')

import splunklib.client as client

def setServer(hostname, splunkuser, splunkpassword):

HOST = hostname

PORT = 8089

USERNAME = splunkuser

PASSWORD = splunkpassword

service = client.connect(host=HOST,port=PORT,username=USERNAME,password=PASSWORD)

#for app in service.apps:

# print (app.name)

# Get the collection of users

#users = service.users

# print(users)

if __name__ == "__main__":

hostname = input("Enter Splunk Hostname/IP: ")

splunkUser = input("Enter Splunk Admin Username: ")

splunkPassword = getpass.getpass("Enter Splunk Admin Password: ")

setServer(hostname, splunkUser, splunkPassword)

-----------------------------------------------------------------

output

-----------------------

#python3 test66.py

Enter Splunk Hostname/IP: prd-p-pivip.splunkcloud.com

Enter Splunk Admin Username: sc_admin

Enter Splunk Admin Password:

Traceback (most recent call last):

File "/Users/sasikanth.bontha/test66.py", line 23, in <module>

setServer(hostname, splunkUser, splunkPassword)

File "/Users/sasikanth.bontha/test66.py", line 11, in setServer

service = client.connect(host=HOST,port=PORT,username=USERNAME,password=PASSWORD)

File "/usr/local/lib/python3.9/site-packages/splunklib/client.py", line 331, in connect

s.login()

File "/usr/local/lib/python3.9/site-packages/splunklib/binding.py", line 883, in login

response = self.http.post(

File "/usr/local/lib/python3.9/site-packages/splunklib/binding.py", line 1242, in post

return self.request(url, message)

File "/usr/local/lib/python3.9/site-packages/splunklib/binding.py", line 1259, in request

response = self.handler(url, message, **kwargs)

File "/usr/local/lib/python3.9/site-packages/splunklib/binding.py", line 1399, in request

connection.request(method, path, body, head)

File "/usr/local/Cellar/python@3.9/3.9.6/Frameworks/Python.framework/Versions/3.9/lib/python3.9/http/client.py", line 1257, in request

self._send_request(method, url, body, headers, encode_chunked)

File "/usr/local/Cellar/python@3.9/3.9.6/Frameworks/Python.framework/Versions/3.9/lib/python3.9/http/client.py", line 1303, in _send_request

self.endheaders(body, encode_chunked=encode_chunked)

File "/usr/local/Cellar/python@3.9/3.9.6/Frameworks/Python.framework/Versions/3.9/lib/python3.9/http/client.py", line 1252, in endheaders

self._send_output(message_body, encode_chunked=encode_chunked)

File "/usr/local/Cellar/python@3.9/3.9.6/Frameworks/Python.framework/Versions/3.9/lib/python3.9/http/client.py", line 1012, in _send_output

self.send(msg)

File "/usr/local/Cellar/python@3.9/3.9.6/Frameworks/Python.framework/Versions/3.9/lib/python3.9/http/client.py", line 952, in send

self.connect()

File "/usr/local/Cellar/python@3.9/3.9.6/Frameworks/Python.framework/Versions/3.9/lib/python3.9/http/client.py", line 1419, in connect

super().connect()

File "/usr/local/Cellar/python@3.9/3.9.6/Frameworks/Python.framework/Versions/3.9/lib/python3.9/http/client.py", line 923, in connect

self.sock = self._create_connection(

File "/usr/local/Cellar/python@3.9/3.9.6/Frameworks/Python.framework/Versions/3.9/lib/python3.9/socket.py", line 843, in create_connection

raise err

File "/usr/local/Cellar/python@3.9/3.9.6/Frameworks/Python.framework/Versions/3.9/lib/python3.9/socket.py", line 831, in create_connection

sock.connect(sa)

TimeoutError: [Errno 60] Operation timed out

Re: not able to connect to splunk web console

kamlesh_vaghela — Wed, 28 Jul 2021 15:24:19 GMT

@skr

It's looks TimeoutError. Can you please check whether the Splunk Instance is reachable or not. Just ping OR use curl for same.

Re: not able to connect to splunk web console

skr — Wed, 28 Jul 2021 15:30:41 GMT

@kamlesh_vaghela

Not able to ping also

# ping prd-p-pivip.splunkcloud.com

PING ec2-54-158-75-102.compute-1.amazonaws.com (54.158.75.102): 56 data bytes

Request timeout for icmp_seq 0

Request timeout for icmp_seq 1

Request timeout for icmp_seq 2

Request timeout for icmp_seq 3

Request timeout for icmp_seq 4

Request timeout for icmp_seq 5

Request timeout for icmp_seq 6

Request timeout for icmp_seq 7

Request timeout for icmp_seq 8

Request timeout for icmp_seq 9

Request timeout for icmp_seq 10

Re: not able to connect to splunk web console

kamlesh_vaghela — Wed, 28 Jul 2021 15:36:55 GMT

Means your VM is not connected to internet, You can verify it by doing ping to https://google.com also. If it is just contact your admin to provide Internet connectivity 🙂

Re: not able to connect to splunk web console

skr — Wed, 28 Jul 2021 15:57:24 GMT

@kamlesh_vaghela

i am able to ping google.com 🙂

#ping google.com

PING google.com (142.250.76.174): 56 data bytes

64 bytes from 142.250.76.174: icmp_seq=0 ttl=118 time=27.841 ms

64 bytes from 142.250.76.174: icmp_seq=1 ttl=118 time=26.473 ms

64 bytes from 142.250.76.174: icmp_seq=2 ttl=118 time=29.327 ms

64 bytes from 142.250.76.174: icmp_seq=3 ttl=118 time=29.047 ms

64 bytes from 142.250.76.174: icmp_seq=4 ttl=118 time=30.789 ms

--- google.com ping statistics ---

5 packets transmitted, 5 packets received, 0.0% packet loss

round-trip min/avg/max/stddev = 26.473/28.695/30.789/1.454 ms

Re: not able to connect to splunk web console

kamlesh_vaghela — Wed, 28 Jul 2021 16:24:35 GMT

@skr

I just notice one thing. Can please check your access of Splunk cloud instance management port for API? May be 8089 port is not open.

Just check below link for more info.

https://docs.splunk.com/Documentation/Splunk/8.2.1/RESTTUT/RESTandCloud#Accessing_the_Splunk_Cloud_REST_API

Re: not able to connect to splunk web console

skr — Thu, 29 Jul 2021 07:32:59 GMT

Hi @kamlesh_vaghela ,

Could you please check port 8089 from your end and open

prd-p-pivip.splunkcloud.com

Note :I am using free trail splunk cloud

Re: not able to connect to splunk web console

kamlesh_vaghela — Thu, 29 Jul 2021 07:48:57 GMT

@skr

No I'm not able to access it. The reason being, when you ask Splunk Support to enable 8089 port, they will ask you to allowed IP list from 8089 port being called. 🙂

Re: not able to connect to splunk web console

skr — Thu, 29 Jul 2021 09:03:31 GMT

@kamlesh_vaghela

Can i give my local IP and ask splunk support team to open 8089 port ?

Re: not able to connect to splunk web console

kamlesh_vaghela — Thu, 29 Jul 2021 09:07:05 GMT

yes @skr

To access your Splunk Cloud deployment using the Splunk REST API and SDKs, submit a case requesting access using the Splunk Support Portal. Splunk Support opens port 8089 for REST access. You can specify a range of IP addresses to control who can access the REST API.

Re: not able to connect to splunk web console

skr — Thu, 29 Jul 2021 09:30:27 GMT

@kamlesh_vaghela

CaseSubmit a Case

Back Back

It appears you do not have an active Support Contract or entitlement, and as a result, cannot open a Support case. If you believe this is an error, please contact Support via telephone using the region specific numbers found here.

All users are welcome to post questions and answers to https://answers.splunk.com.

Re: not able to connect to splunk web console

kamlesh_vaghela — Thu, 29 Jul 2021 09:38:54 GMT

@skr

If anyone in your organisation has active entitlement can raise support ticket for you.

Re: not able to connect to splunk web console

skr — Thu, 29 Jul 2021 09:47:45 GMT

Thank you so much for your help and support @kamlesh_vaghela

Unfortunately no one having any access to this 😒.. i am learning alone.

Re: not able to connect to splunk web console

skr — Thu, 29 Jul 2021 10:05:46 GMT

@kamlesh_vaghela

Any other way ??

Re: not able to connect to splunk web console

kamlesh_vaghela — Thu, 29 Jul 2021 10:14:33 GMT

@skr

Well you are learning then I suggest to install Splunk Enterprise in your local machine and get same experience of REST :). This is what I did and doing 🙂 . Click on Free Splunk on right top and enjoy learning.

Happy Splunking

🙂