All Apps and Add-ons

Rapid7 Enterprise application failing to configure on Splunk 6.2

peterpisani
New Member

Hi Everyone,

We've just installed the Rapid7 Application, after restarting Splunk and attempting to configure the application it's failing with the following error in XML INTERNAL SERVER ERROR

I know the credentials are correct as I've configured the application in another instance of splunk.

Some of the logs below

splunkd_access.log
2014-12-10 14:29:31,897 INFO nexpose_setup:34 - Executing nexpose_setup.py
2014-12-10 14:29:31,948 INFO nexpose_setup:80 - Sucessfully retrieved stored config.
2014-12-10 14:29:31,948 INFO nexpose_setup:91 - No config data for field 'enableCIM' passed to setup script!
2014-12-10 14:29:31,948 INFO nexpose_setup:101 - No config data for field 'enableNexpose' passed to setup script!
2014-12-10 14:29:31,949 INFO nexpose_setup:109 - No config data for field 'port' passed to setup script!
2014-12-10 14:29:31,949 INFO nexpose_setup:117 - No config data for field 'hostname' passed to setup script!
2014-12-10 14:29:31,960 INFO nexpose_setup:147 - Deleting exisitng credential

splunkd.log
12-10-2014 14:27:38.964 +1030 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 70, in init\n hand.execute(info)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 528, in execute\n if self.requestedAction == ACTION_EDIT: self.handleEdit(confInfo)\n File "/opt2/splunk/etc/apps/rapid7/bin/nexpose_setup.py", line 148, in handleEdit\n entity.deleteEntity('/storage/passwords/', c.name, namespace=APPNAME, owner='nobody', sessionKey=sessionKey)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/entity.py", line 438, in deleteEntity\n serverResponse, serverContent = rest.simpleRequest(uri, sessionKey=sessionKey, method='DELETE', raiseAllErrors=True)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/rest/init.py", line 564, in simpleRequest\n raise splunk.BadRequest, (None, serverResponse.messages)\nBadRequest: [HTTP 400] Bad Request; [{'code': None, 'type': 'ERROR', 'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app."}]\n
12-10-2014 14:27:38.964 +1030 ERROR AdminManagerExternal - Unexpected error "" from python handler: "[HTTP 400] Bad Request; [{'code': None, 'type': 'ERROR', 'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app."}]". See splunkd.log for more details.
12-10-2014 14:27:39.039 +1030 ERROR HttpListener - Exception while processing request from 10.30.2.165 for /dj/en-us/rapid7/configuration/: Connection closed by peer
12-10-2014 14:27:39.040 +1030 ERROR HttpListener - Handler for /dj/en-us/rapid7/configuration/ sent a 0 byte response after earlier claiming a Content-Length of 139!
12-10-2014 14:27:40.962 +1030 ERROR AdminManager - Object id=credential:pxgrid:keystore: cannot be deleted in config=app.
12-10-2014 14:27:40.983 +1030 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 70, in init\n hand.execute(info)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 528, in execute\n if self.requestedAction == ACTION_EDIT: self.handleEdit(confInfo)\n File "/opt2/splunk/etc/apps/rapid7/bin/nexpose_setup.py", line 148, in handleEdit\n entity.deleteEntity('/storage/passwords/', c.name, namespace=APPNAME, owner='nobody', sessionKey=sessionKey)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/entity.py", line 438, in deleteEntity\n serverResponse, serverContent = rest.simpleRequest(uri, sessionKey=sessionKey, method='DELETE', raiseAllErrors=True)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/rest/init.py", line 564, in simpleRequest\n raise splunk.BadRequest, (None, serverResponse.messages)\nBadRequest: [HTTP 400] Bad Request; [{'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app.", 'code': None, 'type': 'ERROR'}]\n
12-10-2014 14:27:40.983 +1030 ERROR AdminManagerExternal - Unexpected error "" from python handler: "[HTTP 400] Bad Request; [{'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app.", 'code': None, 'type': 'ERROR'}]". See splunkd.log for more details.
12-10-2014 14:27:41.167 +1030 ERROR HttpListener - Exception while processing request from 10.30.2.165 for /dj/en-us/rapid7/configuration/: Connection closed by peer
12-10-2014 14:27:41.168 +1030 ERROR HttpListener - Handler for /dj/en-us/rapid7/configuration/ sent a 0 byte response after earlier claiming a Content-Length of 139!
12-10-2014 14:27:42.064 +1030 ERROR AdminManager - Object id=credential:pxgrid:keystore: cannot be deleted in config=app.
12-10-2014 14:27:42.084 +1030 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 70, in init\n hand.execute(info)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 528, in execute\n if self.requestedAction == ACTION_EDIT: self.handleEdit(confInfo)\n File "/opt2/splunk/etc/apps/rapid7/bin/nexpose_setup.py", line 148, in handleEdit\n entity.deleteEntity('/storage/passwords/', c.name, namespace=APPNAME, owner='nobody', sessionKey=sessionKey)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/entity.py", line 438, in deleteEntity\n serverResponse, serverContent = rest.simpleRequest(uri, sessionKey=sessionKey, method='DELETE', raiseAllErrors=True)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/rest/init.py", line 564, in simpleRequest\n raise splunk.BadRequest, (None, serverResponse.messages)\nBadRequest: [HTTP 400] Bad Request; [{'type': 'ERROR', 'code': None, 'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app."}]\n
12-10-2014 14:27:42.084 +1030 ERROR AdminManagerExternal - Unexpected error "" from python handler: "[HTTP 400] Bad Request; [{'type': 'ERROR', 'code': None, 'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app."}]". See splunkd.log for more details.

Any ideas ?

0 Karma
1 Solution

JJCassidy_R7
Explorer

Hello,

Please contact Rapid7 Integrations Support at integrations_support[at]rapid7[dot]com and a representative from support will assist you in resolving this issue.

View solution in original post

horanman01
Explorer

How did you end up solving this issue? would be really great if you posted it.

0 Karma

JJCassidy_R7
Explorer

The original problem was resolved in a release some time ago.

That line of logging indicates that the script is loaded but what you enter into the 'Configuration' page of the application will determine what the script will do.

If you think the application is not configuring correctly then please contact Rapid7 Integrations Support at integrations_support [at] rapid7 [dot] com and a representative from support will assist you in resolving this issue.

0 Karma

dimitris_vergos
Path Finder

Any luck with this?

I am also trying to set it up, but the script fails at running

gets stuck here - 2015-11-19 11:22:30,811 INFO nexpose_setup:34 - Executing nexpose_setup.py

0 Karma

JJCassidy_R7
Explorer

Hello,

Please contact Rapid7 Integrations Support at integrations_support[at]rapid7[dot]com and a representative from support will assist you in resolving this issue.

Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...