All Apps and Add-ons

Tons of network errors in Python log


I'm receiving a ton of errors in my Python log from the AWS Addon on the HF I'm running the data gathering from. I have been collecting data, and seemingly my dashboards appear to be working OK. However, I'm concerned that this error is indicative of a problem which may be causing data to go missing.

Have any of you encountered this error and have successfully troubleshooted it? Is there an option in the app or on Splunk I can turn on to increase the verboseness of the logging? Since I'm unable to see which of the data gathering commands is spawning this error I'm not really sure what to do. Thanks!

Supporting info:
- Splunk
- Splunk Addon for AWS 4.1.1
- No proxy configured


2016-11-03 13:42:28,920 ERROR Caught exception reading instance data
Traceback (most recent call last):
  File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/boto/", line 210, in retry_url
    r =, timeout=timeout)
  File "/opt/splunk/lib/python2.7/", line 431, in open
    response = self._open(req, data)
  File "/opt/splunk/lib/python2.7/", line 449, in _open
    '_open', req)
  File "/opt/splunk/lib/python2.7/", line 409, in _call_chain
    result = func(*args)
  File "/opt/splunk/lib/python2.7/", line 1227, in http_open
    return self.do_open(httplib.HTTPConnection, req)
  File "/opt/splunk/lib/python2.7/", line 1197, in do_open
    raise URLError(err)
URLError: <urlopen error [Errno 101] Network is unreachable>
0 Karma


From what I can tell - The retry_url function in ./boto/ file is used for accessing the metadata service on an EC2 instance. Basically if you have access to an EC2 instance.. and AWS SDK for python is installed.. you can run this function and point it at the url of Since you probably aren't running the AWS app from an EC2 instance you are going to get the URLError.

How i fixed it.
from dir /opt/splunk/etc/apps/splunk_app_aws/bin/boto
[splunk]$ cp
[splunk]$ vi
add the following 2 lines to catch the exception
except urllib.error.URLError as e:
return ''

This will go in the retry_url() function between the other 2 except statements..

except urllib.error.HTTPError as e:
code = e.getcode()
if code == 404 and not retry_on_404:
return ''

except urllib.error.URLError as e:
return ''

except Exception as e:
boto.log.exception('Caught exception reading instance data')

Hope this helps - I stopped getting the error messages. This isn't the best fix but I'm new to python and splunk.
No restart or anything required.


Thanks for pointing all of this out! That's some good digging into the problem, and it lines up with some of the things I'm seeing. I'll see if I can figure out what's going on further, since most of the TA scripts call that retry function in the event of a failure, either its a defect with the SDK or potentially with the usage of the boto library by the TA itself.

0 Karma


Hello goodsellt,

The error is a failure to connect to AWS, which is most likely tied network connectivity issues such as an unreliable connection. Also AWS does have connection problems periodically. You are probably not losing data unless what ever data was being downloaded was unfinished.

0 Karma


Thanks! Would you know of any way I can check the exact function being called when this error is thrown? In an interest of thoroughness I'm attempting to find out if these errors are being generated by a single one of the data inputs or by a variety of them.

0 Karma
Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...