topic Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"? in Getting Data In

Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

benjamin009 — Thu, 04 Feb 2016 17:03:17 GMT

We have a fresh Splunk 6.3 install. We literally have 0 data currently indexing. When I click Settings -> Data Inputs. I am getting the error:

500 Internal Server Error
Return to Splunk home page
View more information about your request (request ID = tonsofnumbersandletters) in Search 
This page was linked to from http://x.x.x.x:8000/en-US/app/search/search.
You are logged into x.x.x.x:8000 as admin, which is connected to splunkd @ xxx

When I attempt to search error logs for the specific request ID, nothing populates. There is nothing in any of the error logs referencing this error. I have attempted several searches on Splunk Answers and this seemed to be a common thing for 5.x. I have yet to see a response that works with my issue. I also installed S.o.S (Splunk on Splunk) and do not see anything out of the ordinary that would cause this issue.

Both the search head and Indexer are CentOS 7 running with the user Splunk, not root. I am running out of ideas. Any help is appreciated.

P.S. When I go into Settings - Add Data. I am able to load that properly, but I am not able to view the data inputs.

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

benjamin009 — Mon, 08 Feb 2016 13:28:04 GMT

For those of you that are interested in the resolution. I (stupidly) disabled the splunk_httpinput app on the indexer. Once I re-enabled it, trying to add data worked just fine.

Dumb mistake by me. Dont be like me.

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

williamholder — Mon, 04 Apr 2016 00:50:14 GMT

it might have been a dumb mistake but you aren't alone - thanks for the answer.

Now I'm going to write that down somewhere for the next bunny that disables that app.

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

protius2 — Mon, 11 Apr 2016 14:50:08 GMT

I have the exact same issue but I did not turn off splunk_httpinput. I cycled it as disabled and re-enabled it just for grins and restarted Splunk, but this did not help. Any other suggestions?

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

williamholder — Mon, 11 Apr 2016 19:16:00 GMT

Hi mate,

Yup, that fixed it completely. It would have been handy if the error screen had some more relevant information to help track this down.

At least it's fixed now.

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

cpt12tech — Wed, 13 Jul 2016 22:30:55 GMT

I'm also getting this message. My splunk_httpinput app was enabled, so I tried disabling, restart splunk, enable, restart splunk. Still can't view the data inputs. Next I tried enabling all the disabled apps. At one point I got a message saying I needed to reboot splunk from the CLI because the web interface wasn't working. I rebooted using the CLI, and now I can't connect to splunk using my web browser.

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

cyndiback — Thu, 14 Jul 2016 13:49:29 GMT

I'm received the error but did not disable the splunk_httpinput app. I tried disabling and re-enabling the app. Did not help.

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

cpt12tech — Thu, 14 Jul 2016 20:05:36 GMT

I got the webserver backup up by running
splunk webserver enable
still not able to access the data inputs

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

kilama — Fri, 22 Jul 2016 16:48:35 GMT

I'm having the same problem here. No success with the splunk_httpinput trick. I got this on the splunkd.log:

07-22-2016 11:45:26.361 -0300 WARN  IConfCache - Error populating shared UserConfCache state: inputs /opt/splunk/etc/deployment-apps
07-22-2016 11:45:26.427 -0300 FATAL DeploymentServer - Attempted operation on uninitialized instance.
07-22-2016 11:45:26.427 -0300 ERROR DeploymentServer - Deployment Server is not available, because errors prevented its initialization. Please consult splunkd.log for details. You can try to reload Deployment Server after correcting these errors.

And some other logs/errors on web_service.log (Python tracebacks).

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

cjenglish99 — Fri, 22 Jul 2016 18:45:30 GMT

This is exactly what I'm seeing, happens after I switch from Enterprise Trial to Free license.

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

brianeh — Mon, 25 Jul 2016 16:26:18 GMT

This didn't work for me.
This has been new since I upgraded to 6.4.2

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

brianeh — Mon, 25 Jul 2016 18:04:31 GMT

I ended up having to flip from free back to the enterprise free trial in order to be able to open Setting -> Data Inputs again
Due to a logged error that DeployServer was not enabled.
Which was the root of my 500 error.

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

sscarcella — Tue, 26 Jul 2016 21:48:39 GMT

HELP... I am using the free version so there is no support. I am getting this error and have not disabled the httpinput. It happened after upgrading to 6.4.2. Getting tons of these in the log file: -0500 WARN IntrospectionGenerator:resource_usage - RU - Failure executing PDH query, skipping getting iostats data this collection cycle. Status code is -2147481643

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

epacke — Sun, 31 Jul 2016 11:28:22 GMT

+1 from me. After upgrading it stopped working.

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

sscarcella — Sun, 31 Jul 2016 11:46:51 GMT

Yes, it seems that the 6.4.2 update is not compatible with the free version. I backed up and uninstalled then reinstalled 6.4.1 and it worked fine.

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

Jarohnimo — Sun, 31 Jul 2016 12:30:39 GMT

The account you are using is an admin on both boxes in splunk and on the boxes?

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

brianeh — Mon, 01 Aug 2016 15:46:50 GMT

I would agree.
I had it working, then as soon as I switched to the Free license again, it stopped working again.
Back tot he 500 error.
I hope there is a fix soon.

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

smemobox — Mon, 01 Aug 2016 16:07:34 GMT

I confirm.
All free servers upgraded to 6.4.2 are suffering data inputs wise

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

t00rnad00 — Tue, 02 Aug 2016 13:40:28 GMT

Same problem.
Also loop with Internet Explorer 11 - "Your session has expired. Log in to return to the system."

Re: Why am I getting "500 Internal Server Error" when I click "Data Inputs" under "Settings"?

michealrp — Tue, 09 Aug 2016 15:25:22 GMT

I don't use the deployment server, and my serverclass.conf file had only the global section setting it to disabled. However, in order to get back into my inputs section, I had to enable the service once again. I did so by renaming the serverclass.conf file in local to something else.