All Apps and Add-ons

Website Monitoring App stops the splunk service


Hi All,

I am using Website Monitoring in one of our HF.But whenever i run sourcetype=web_ping query in the search bar, splunk PID's increases suddently and it stops the splunk service on HF. Please suggest me where am i going wrong/Help me to fix the issue

We are monitoring around 114 URL's with below sample of inputs.conf

interval = 2m
title = SOMAN
url =
user_agent = Splunk Website Monitoring (+
configuration = default


max_response_body_length = 1000
proxy_port = 312
proxy_server = proxy.conexus.svc.local
proxy_type = http
thread_limit = 100


ERROR [618cf90fac7eff7b2b1290] config:146 - [HTTP 401] Client is not authenticated
Traceback (most recent call last):
File "/opt/app/splunk/splunk/lib/python3.7/site-packages/splunk/appserver/mrsparkle/lib/", line 144, in getServerZoneInfoNoMem
return times.getServerZoneinfo()
File "/opt/app/splunk/splunk/lib/python3.7/site-packages/splunk/appserver/mrsparkle/lib/", line 163, in getServerZoneinfo
serverStatus, serverResp ='/search/timeparser/tz', sessionKey=sessionKey)
File "/opt/app/splunk/splunk/lib/python3.7/site-packages/splunk/rest/", line 553, in simpleRequest
raise splunk.AuthenticationFailed
splunk.AuthenticationFailed: [HTTP 401] Client is not authenticated


@LukeMurphey @LukeMurphey1 

Labels (2)
Tags (4)
0 Karma


Any help on this please 😕

0 Karma


I don't know this app but the logs clearly say that you're trying to push HTTP request with no/wrong authentication.

0 Karma


Does anyone know how to determine the App/TA that is calling this?

 I had the Zscaler App and TA installed on my test instance and it was throwing an incredible # of errors.  I uninstalled both (zscalersplunkapp, TA-Zscaler_CIM) an these errors disappeared, but I'd like to know how to trace this to the caller instead of removing apps one by one.


0 Karma


Are you sure it's a follow-up to the original post?

0 Karma
Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...