Rapid7 Enterprise application failing to configure on Splunk 6.2

[peterpisani]

Hi Everyone,

We've just installed the Rapid7 Application, after restarting Splunk and attempting to configure the application it's failing with the following error in XML INTERNAL SERVER ERROR

I know the credentials are correct as I've configured the application in another instance of splunk.

Some of the logs below

splunkd_access.log
2014-12-10 14:29:31,897 INFO nexpose_setup:34 - Executing nexpose_setup.py
2014-12-10 14:29:31,948 INFO nexpose_setup:80 - Sucessfully retrieved stored config.
2014-12-10 14:29:31,948 INFO nexpose_setup:91 - No config data for field 'enableCIM' passed to setup script!
2014-12-10 14:29:31,948 INFO nexpose_setup:101 - No config data for field 'enableNexpose' passed to setup script!
2014-12-10 14:29:31,949 INFO nexpose_setup:109 - No config data for field 'port' passed to setup script!
2014-12-10 14:29:31,949 INFO nexpose_setup:117 - No config data for field 'hostname' passed to setup script!
2014-12-10 14:29:31,960 INFO nexpose_setup:147 - Deleting exisitng credential

splunkd.log
12-10-2014 14:27:38.964 +1030 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 70, in init\n hand.execute(info)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 528, in execute\n if self.requestedAction == ACTION_EDIT: self.handleEdit(confInfo)\n File "/opt2/splunk/etc/apps/rapid7/bin/nexpose_setup.py", line 148, in handleEdit\n entity.deleteEntity('/storage/passwords/', c.name, namespace=APPNAME, owner='nobody', sessionKey=sessionKey)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/entity.py", line 438, in deleteEntity\n serverResponse, serverContent = rest.simpleRequest(uri, sessionKey=sessionKey, method='DELETE', raiseAllErrors=True)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/rest/init.py", line 564, in simpleRequest\n raise splunk.BadRequest, (None, serverResponse.messages)\nBadRequest: [HTTP 400] Bad Request; [{'code': None, 'type': 'ERROR', 'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app."}]\n
12-10-2014 14:27:38.964 +1030 ERROR AdminManagerExternal - Unexpected error "" from python handler: "[HTTP 400] Bad Request; [{'code': None, 'type': 'ERROR', 'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app."}]". See splunkd.log for more details.
12-10-2014 14:27:39.039 +1030 ERROR HttpListener - Exception while processing request from 10.30.2.165 for /dj/en-us/rapid7/configuration/: Connection closed by peer
12-10-2014 14:27:39.040 +1030 ERROR HttpListener - Handler for /dj/en-us/rapid7/configuration/ sent a 0 byte response after earlier claiming a Content-Length of 139!
12-10-2014 14:27:40.962 +1030 ERROR AdminManager - Object id=credential:pxgrid:keystore: cannot be deleted in config=app.
12-10-2014 14:27:40.983 +1030 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 70, in init\n hand.execute(info)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 528, in execute\n if self.requestedAction == ACTION_EDIT: self.handleEdit(confInfo)\n File "/opt2/splunk/etc/apps/rapid7/bin/nexpose_setup.py", line 148, in handleEdit\n entity.deleteEntity('/storage/passwords/', c.name, namespace=APPNAME, owner='nobody', sessionKey=sessionKey)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/entity.py", line 438, in deleteEntity\n serverResponse, serverContent = rest.simpleRequest(uri, sessionKey=sessionKey, method='DELETE', raiseAllErrors=True)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/rest/init.py", line 564, in simpleRequest\n raise splunk.BadRequest, (None, serverResponse.messages)\nBadRequest: [HTTP 400] Bad Request; [{'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app.", 'code': None, 'type': 'ERROR'}]\n
12-10-2014 14:27:40.983 +1030 ERROR AdminManagerExternal - Unexpected error "" from python handler: "[HTTP 400] Bad Request; [{'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app.", 'code': None, 'type': 'ERROR'}]". See splunkd.log for more details.
12-10-2014 14:27:41.167 +1030 ERROR HttpListener - Exception while processing request from 10.30.2.165 for /dj/en-us/rapid7/configuration/: Connection closed by peer
12-10-2014 14:27:41.168 +1030 ERROR HttpListener - Handler for /dj/en-us/rapid7/configuration/ sent a 0 byte response after earlier claiming a Content-Length of 139!
12-10-2014 14:27:42.064 +1030 ERROR AdminManager - Object id=credential:pxgrid:keystore: cannot be deleted in config=app.
12-10-2014 14:27:42.084 +1030 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 70, in init\n hand.execute(info)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 528, in execute\n if self.requestedAction == ACTION_EDIT: self.handleEdit(confInfo)\n File "/opt2/splunk/etc/apps/rapid7/bin/nexpose_setup.py", line 148, in handleEdit\n entity.deleteEntity('/storage/passwords/', c.name, namespace=APPNAME, owner='nobody', sessionKey=sessionKey)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/entity.py", line 438, in deleteEntity\n serverResponse, serverContent = rest.simpleRequest(uri, sessionKey=sessionKey, method='DELETE', raiseAllErrors=True)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/rest/init.py", line 564, in simpleRequest\n raise splunk.BadRequest, (None, serverResponse.messages)\nBadRequest: [HTTP 400] Bad Request; [{'type': 'ERROR', 'code': None, 'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app."}]\n
12-10-2014 14:27:42.084 +1030 ERROR AdminManagerExternal - Unexpected error "" from python handler: "[HTTP 400] Bad Request; [{'type': 'ERROR', 'code': None, 'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app."}]". See splunkd.log for more details.

Any ideas ?

[horanman01]

How did you end up solving this issue? would be really great if you posted it.

[JJCassidy_R7]

The original problem was resolved in a release some time ago.

That line of logging indicates that the script is loaded but what you enter into the 'Configuration' page of the application will determine what the script will do.

If you think the application is not configuring correctly then please contact Rapid7 Integrations Support at integrations_support [at] rapid7 [dot] com and a representative from support will assist you in resolving this issue.

[dimitris_vergos]

Any luck with this?

I am also trying to set it up, but the script fails at running

gets stuck here - 2015-11-19 11:22:30,811 INFO nexpose_setup:34 - Executing nexpose_setup.py

[JJCassidy_R7 · Accepted solution]

Hello,

Please contact Rapid7 Integrations Support at integrations_support[at]rapid7[dot]com and a representative from support will assist you in resolving this issue.