splunklib.binding.HTTPError: HTTP 500 Internal Server Error -- b'{"messages":[{"type":"ERROR","text":"Cannot call handler \'splunk_ta_aws_settings_proxy\' due to missing script \'aws_proxy_settings_rh.py\'."}]}'
2022-06-18 19:03:38,719 level=INFO pid=14431 tid=MainThread logger=splunksdc.collector pos=collector.py:run:270 | | message="Modular input exited."
2022-06-18 19:03:51,931 level=INFO pid=14435 tid=MainThread logger=splunksdc.collector pos=collector.py:run:267 | | message="Modular input started."
2022-06-18 19:03:51,940 level=ERROR pid=14435 tid=MainThread logger=splunk_ta_aws.modinputs.sqs_based_s3.handler pos=utils.py:wrapper:77 | datainput="SqsBasedS3Input" start_time=1655579031 | message="Data input was interrupted by an unhandled exception."
Traceback (most recent call last):
File "/opt/splunk/etc/slave-apps/Splunk_TA_aws/bin/splunksdc/utils.py", line 75, in wrapper
return func(*args, **kwargs)
File "/opt/splunk/etc/slave-apps/Splunk_TA_aws/bin/splunk_ta_aws/modinputs/sqs_based_s3/handler.py", line 857, in run
proxy = ProxySettings.load(config)
File "/opt/splunk/etc/slave-apps/Splunk_TA_aws/bin/splunk_ta_aws/common/proxy.py", line 40, in load
virtual=True,
File "/opt/splunk/etc/slave-apps/Splunk_TA_aws/bin/splunksdc/config.py", line 38, in load
content = self._cached_load(path)
File "/opt/splunk/etc/slave-apps/Splunk_TA_aws/bin/splunksdc/config.py", line 52, in _cached_load
content = self._fresh_load(path)
File "/opt/splunk/etc/slave-apps/Splunk_TA_aws/bin/splunksdc/config.py", line 64, in _fresh_load
elements = self._get(path, query)
File "/opt/splunk/etc/slave-apps/Splunk_TA_aws/bin/splunksdc/config.py", line 68, in _get
response = self._service.get(path, **query)
File "/opt/splunk/etc/slave-apps/Splunk_TA_aws/lib/splunklib/binding.py", line 288, in wrapper
return request_fun(self, *args, **kwargs)
File "/opt/splunk/etc/slave-apps/Splunk_TA_aws/lib/splunklib/binding.py", line 69, in new_f
val = f(*args, **kwargs)
File "/opt/splunk/etc/slave-apps/Splunk_TA_aws/lib/splunklib/binding.py", line 684, in get
response = self.http.get(path, all_headers, **query)
File "/opt/splunk/etc/slave-apps/Splunk_TA_aws/lib/splunklib/binding.py", line 1197, in get
return self.request(url, { 'method': "GET", 'headers': headers })
File "/opt/splunk/etc/slave-apps/Splunk_TA_aws/lib/splunklib/binding.py", line 1260, in request
raise HTTPError(response)
splunklib.binding.HTTPError: HTTP 500 Internal Server Error -- b'{"messages":[{"type":"ERROR","text":"Cannot call handler \'splunk_ta_aws_settings_proxy\' due to missing script \'aws_proxy_settings_rh.py\'."}]}'
2022-06-18 19:03:51,942 level=INFO pid=14435 tid=MainThread logger=splunksdc.collector pos=collector.py:run:270 | | message="Modular input exited."
Earlier it was working fine, it's not working post i tried changing password.conf file, what should i do now? Reverting the password.conf is not working
Hi
running AWS inputs on index cluster is not supported (see Distributed deployments). You should set up HF (heavy forwarder) to run those and then forward events to IDX cluster.
r. Ismo