All Apps and Add-ons

Data collection on remote machines into Splunk Stream with status=500

dees74
Explorer

Hello.
I have installed Splunk/enterprise into docker (1year free) and SplunkApp. I try to install data collection on remote machine.
After installing I see in logs:

22:37:25.517 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500
22:37:35.542 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500
22:37:45.500 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500
22:37:55.668 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500
22:38:05.861 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500
22:38:17.007 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500
22:38:27.920 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500

"linux" is VM name.'

What should I do? Need I add some permissions for Forwarder? Where?

0 Karma

dees74
Explorer
0 Karma

dees74
Explorer

when i try to open this URL n browser I see Error 500 and then in splunk logs:

[05/Mar/2019:18:36:56] HTTP Traceback (most recent call last):
  File \"/opt/splunk/lib/python2.7/site-packages/cherrypy/_cprequest.py\", line 606, in respond
    cherrypy.response.body = self.handler()
  File \"/opt/splunk/lib/python2.7/site-packages/cherrypy/_cpdispatch.py\", line 25, in __call__
    return self.callable(*self.args, **self.kwargs)
  File \"/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/routes.py\", line 366, in default
    return route.target(self, **kw)
  File \"<string>\", line 1, in <lambda>
  File \"/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/decorators.py\", line 38, in rundecs
    return fn(*a, **kw)
  File \"<string>\", line 1, in <lambda>
  File \"/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/decorators.py\", line 118, in check
    return fn(self, *a, **kw)
  File \"<string>\", line 1, in <lambda>
  File \"/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/decorators.py\", line 167, in validate_ip
    return fn(self, *a, **kw)
  File \"<string>\", line 1, in <lambda>
  File \"/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/decorators.py\", line 407, in handle_exceptions
    return fn(self, *a, **kw)
  File \"<string>\", line 35, in list
  File \"/opt/splunk/etc/apps/splunk_app_stream/bin/splunk_app_stream/models/indexer.py\", line 208, in list
    update_indexers()
  File \"/opt/splunk/etc/apps/splunk_app_stream/bin/splunk_app_stream/models/indexer.py\", line 191, in update_indexers
    tmp_indexers = construct_indexers()
  File \"/opt/splunk/etc/apps/splunk_app_stream/bin/splunk_app_stream/models/indexer.py\", line 131, in construct_indexers
    jsonResp = get_indexers()
  File \"/opt/splunk/etc/apps/splunk_app_stream/bin/splunk_app_stream/models/indexer.py\", line 48, in get_indexers
    raise splunk.RESTException(500, 'Internal error, failed to get indexers')
RESTException: [HTTP 500] Internal error, failed to get indexers
0 Karma
Get Updates on the Splunk Community!

Buttercup Games: Further Dashboarding Techniques (Part 7)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...