Hi all,
Our Splunk App for AWS stopped working, the error message i receiving in splunkd log:
05-22-2017 11:15:10.128 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_aws/bin/aws_config.py" ERRORFailed to get conf=aws_account_ext, stanza=AWS account, status=404, reason=Not Found, detail=<?xml version="1.0" encoding="UTF-8"?>
05-22-2017 11:15:10.128 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_aws/bin/aws_config.py" <response>
05-22-2017 11:15:10.128 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_aws/bin/aws_config.py" <messages>
05-22-2017 11:15:10.128 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_aws/bin/aws_config.py" <msg type="ERROR">
05-22-2017 11:15:10.128 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_aws/bin/aws_config.py" In handler 'conf-aws_account_ext': Could not find object id=AWS account</msg>
05-22-2017 11:15:10.128 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_aws/bin/aws_config.py" </messages>
05-22-2017 11:15:10.128 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_aws/bin/aws_config.py" </response>
05-22-2017 11:15:11.974 +0000 WARN AuthorizationManager - Unknown role 'winfra-admin'
05-22-2017 11:15:11.975 +0000 WARN AuthorizationManager - Unknown role 'winfra-admin'
05-22-2017 11:15:12.261 +0000 WARN AuthorizationManager - Unknown role 'winfra-admin'
05-22-2017 11:15:12.261 +0000 WARN AuthorizationManager - Unknown role 'winfra-admin'
and from Splunk Web:
"Unexpected error occurs. In handler 'splunk_app_aws_proxy_inputs': Unexpected error "" from python handler: "HTTP 404 Not Found -- In handler 'roles': Could not find object id=winfra-admin". See splunkd.log for more details."
what is the cause and how i can solve it?
Thanks!
added winfra-admin role to splunk solve it