How to resolve this Splunk_TA_aws error?

maa_splunk — Tue, 19 Jul 2022 14:23:07 GMT

Hi,

I have deployed the Splunk TA aws application on a test environment. For authentication I'm using AWS roles. The data seems to be coming in, however I get the following errors in the _internal index (source is from python.log)

ERROR REST ERROR[1020]: Fail to encrypt credential information - {"base_app": "Splunk_TA_aws", "endpoint": "configs/conf-splunk_ta_aws_iam_roles", "handler": "BaseRestHandler", "encrypted_args": ["arn"], "name": "inventory_access", "error": "'Entity' object has no attribute 'update'"} Traceback (most recent call last): File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/3rdparty/python3/splunktalib/rest_manager/cred_mgmt.py", line 43, in encrypt data.update({arg:CredMgmt.ENCRYPTED_MAGIC_TOKEN for arg in data if arg in self._encryptedArgs}) AttributeError: 'Entity' object has no attribute 'update'

Please note the password file within the local folder seem to be create ok.

Has anyone come across this error before? Is it harmful?

Regards,

Re: Splunk_TA_aws error

Sumantab88 — Tue, 19 Jul 2022 08:28:25 GMT

Getting same error post Splunk_TA_aws upgrade to 6.0.0 from 5.1.0, however in my case- I am not getting any data as well post upgrade.

Re: How to resolve this Splunk_TA_aws error?

hahabuknow — Thu, 19 Oct 2023 02:20:19 GMT

Hi @maa_splunk , I encountered the same issue. Did you resolve this error?

topic Re: How to resolve this Splunk_TA_aws error? in Getting Data In

How to resolve this Splunk_TA_aws error?

Re: Splunk_TA_aws error

Re: How to resolve this Splunk_TA_aws error?