- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Data collection on remote machines into Splunk Stream with status=500

dees74
Explorer
03-05-2019
09:57 AM
Hello.
I have installed Splunk/enterprise into docker (1year free) and SplunkApp. I try to install data collection on remote machine.
After installing I see in logs:
22:37:25.517 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500
22:37:35.542 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500
22:37:45.500 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500
22:37:55.668 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500
22:38:05.861 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500
22:38:17.007 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500
22:38:27.920 ERROR stream.CaptureServer - /en-us/custom/splunk_app_stream/indexers?streamForwarderId=linux status=500
"linux" is VM name.'
What should I do? Need I add some permissions for Forwarder? Where?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

dees74
Explorer
03-05-2019
09:58 AM
Forwarder installed with man:
https://docs.splunk.com/Documentation/StreamApp/7.1.2/DeployStreamApp/SetupStream
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

dees74
Explorer
03-05-2019
10:39 AM
when i try to open this URL n browser I see Error 500 and then in splunk logs:
[05/Mar/2019:18:36:56] HTTP Traceback (most recent call last):
File \"/opt/splunk/lib/python2.7/site-packages/cherrypy/_cprequest.py\", line 606, in respond
cherrypy.response.body = self.handler()
File \"/opt/splunk/lib/python2.7/site-packages/cherrypy/_cpdispatch.py\", line 25, in __call__
return self.callable(*self.args, **self.kwargs)
File \"/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/routes.py\", line 366, in default
return route.target(self, **kw)
File \"<string>\", line 1, in <lambda>
File \"/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/decorators.py\", line 38, in rundecs
return fn(*a, **kw)
File \"<string>\", line 1, in <lambda>
File \"/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/decorators.py\", line 118, in check
return fn(self, *a, **kw)
File \"<string>\", line 1, in <lambda>
File \"/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/decorators.py\", line 167, in validate_ip
return fn(self, *a, **kw)
File \"<string>\", line 1, in <lambda>
File \"/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/decorators.py\", line 407, in handle_exceptions
return fn(self, *a, **kw)
File \"<string>\", line 35, in list
File \"/opt/splunk/etc/apps/splunk_app_stream/bin/splunk_app_stream/models/indexer.py\", line 208, in list
update_indexers()
File \"/opt/splunk/etc/apps/splunk_app_stream/bin/splunk_app_stream/models/indexer.py\", line 191, in update_indexers
tmp_indexers = construct_indexers()
File \"/opt/splunk/etc/apps/splunk_app_stream/bin/splunk_app_stream/models/indexer.py\", line 131, in construct_indexers
jsonResp = get_indexers()
File \"/opt/splunk/etc/apps/splunk_app_stream/bin/splunk_app_stream/models/indexer.py\", line 48, in get_indexers
raise splunk.RESTException(500, 'Internal error, failed to get indexers')
RESTException: [HTTP 500] Internal error, failed to get indexers
