500 Internal Server Error out of splunklib/binding.py

jwhughes58 — Thu, 16 Apr 2020 19:30:45 GMT

I'm seeing this error message stream when the TA-ObserveIT tries to get what I think is the configuration information.

2020-04-16 16:29:33,418 ERROR pid=28982 tid=MainThread file=base_modinput.py:log_error:307 | Traceback (most recent call last):
  File "/splunk/hot/apps/splunk/etc/apps/TA-ObserveIT/bin/ta_observeit/modinput_wrapper/base_modinput.py", line 113, in stream_events
    self.parse_input_args(input_definition)
  File "/splunk/hot/apps/splunk/etc/apps/TA-ObserveIT/bin/ta_observeit/modinput_wrapper/base_modinput.py", line 152, in parse_input_args
    self._parse_input_args_from_global_config(inputs)
  File "/splunk/hot/apps/splunk/etc/apps/TA-ObserveIT/bin/ta_observeit/modinput_wrapper/base_modinput.py", line 171, in _parse_input_args_from_global_config
    ucc_inputs = global_config.inputs.load(input_type=self.input_type)
  File "/splunk/hot/apps/splunk/etc/apps/TA-ObserveIT/bin/ta_observeit/splunktaucclib/global_config/configuration.py", line 270, in load
    input_item['entity']
  File "/splunk/hot/apps/splunk/etc/apps/TA-ObserveIT/bin/ta_observeit/splunktaucclib/global_config/configuration.py", line 175, in _load_endpoint
    **query
  File "/splunk/hot/apps/splunk/etc/apps/TA-ObserveIT/bin/ta_observeit/solnlib/packages/splunklib/binding.py", line 287, in wrapper
    return request_fun(self, *args, **kwargs)
  File "/splunk/hot/apps/splunk/etc/apps/TA-ObserveIT/bin/ta_observeit/solnlib/packages/splunklib/binding.py", line 69, in new_f
    val = f(*args, **kwargs)
  File "/splunk/hot/apps/splunk/etc/apps/TA-ObserveIT/bin/ta_observeit/solnlib/packages/splunklib/binding.py", line 665, in get
    response = self.http.get(path, self._auth_headers, **query)
  File "/splunk/hot/apps/splunk/etc/apps/TA-ObserveIT/bin/ta_observeit/solnlib/packages/splunklib/binding.py", line 1160, in get
    return self.request(url, { 'method': "GET", 'headers': headers })
  File "/splunk/hot/apps/splunk/etc/apps/TA-ObserveIT/bin/ta_observeit/solnlib/packages/splunklib/binding.py", line 1221, in request
    raise HTTPError(response)
HTTPError: HTTP 500 Internal Server Error -- {"messages":[{"type":"ERROR","text":"Unexpected error \"<class 'splunktaucclib.rest_handler.error.RestError'>\" from python handler: \"REST Error [400]: Bad Request -- HTTP 400 Bad Request -- Invalid Events Pagination Value: TypeError(\"int() argument must be a string or a number, not 'NoneType'\",)\".  See splunkd.log for more details."}]}

I've been trying to figure out a way of printing to the app or splunkd log files the request so I can see if that makes sense. The "Invalid Events Pagination Value: TypeError" doesn't make sense to me since the inputs.conf has this in it

events_pagination = 10000

I'm out of ideas. Any thoughts on how to resolve this are appreciated.

TIA,
Joe

topic 500 Internal Server Error out of splunklib/binding.py in Getting Data In

500 Internal Server Error out of splunklib/binding.py