All Apps and Add-ons

Cisco ACI Add-on for Splunk Enterprise: How to resolve "ACI Error: Did not receive a session key from splunkd." connection error?


Hi. I'm trying to set up the Cisco ACI Add-on for Splunk Enterprise v4.0 on Splunk Enterprise 6.5.1, and am getting connection errors in splunkd.log similar to this:

03-02-2017 11:34:46.679 -0600 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA_cisco-ACI/bin/ -health fvTenant fvAp fvEPg fvAEPg fvBD vzFilter vzEntry vzBrCP fvCtx l3extOut fabricHealthTotal fabricNode eqptcapacityPolEntry5min eqptFabP eqptLeafP eqptCh eqptLC eqptFt eqptPsu eqptSupC ethpmPhysIf" Could not relogin to APIC due to ConnectionError

When I run the script from the command line, I get this:

splunk@server:[~/etc/apps/TA_cisco-ACI/bin]> /opt/splunk/bin/splunk cmd python
ACI Error: Did not receive a session key from splunkd. Please enable passAuth in inputs.conf for this script

Not sure how to troubleshoot this.


The most likely cause of your issue is not trusting your APICs SSL/TLS cert. My bandaid/fix was to edit TA_cisco-ACI/bin/config.ini.

I changed:

This setting description is: "Indicates whether SSL certificates must be verified"

0 Karma


I'm having the same issue on Splunk 6.6.1 with addon 4.0.1

If you want to call the script locally, you'll have to do something like what's in here:

As for the ConnectionError - I'm still troubleshooting that

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!