DSDL App - Apply command fails due to time-out

[berrybob]

Hi, we are trying to get some of the pretrained models from Splunk ESCU app running but without success so far. When I run any of their searches, it fails due to missing response. The search job indicates that the connection eventually times out.

In our FW logs I can clearly see that the connections are being dropped with a (seemingly odd) message info that says Invalid TCP packet - source / destination port 0. I verified that message by running a tcpdump on the corresponding search head and re-initiated the apply command. Indeed, it attempts to connect on Port 0.

 I also verified the YAML of the service in the Network section of Openshift and it righfully points to api / tcp 5000. I can also connect to the exposed API of the Pod via Curl.

At this point im not sure where and what exactly is going wrong. Any hints would be greatly appreciated. KR

[livehybrid]

Hi @berrybob 

When testing with Curl, were you using the same Pod address as used in DSDL, or directly on the Pod IP? Are you able to hit port 5000 on the container host and reach the API within the Pod?

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

[PrewinThomas]

@berrybob Most probably App may be referencing an environment variable or configuration value that is unset or empty, defaulting to 0 based on the given message.

Or may be incompatibility in the version of ESCU or its dependencies with your openshift.