All Apps and Add-ons

Why is the Google Cloud Platform unable to pull data?

shwetas
Explorer

Hi all,

I am trying to pull data from Google cloud to Splunk for Analytics. After configuring good cloud credential and cloud monitoring input I am seeing the below error in logs and can't see any google cloud platform data in Splunk. Please check the below error and suggest what can be done to fix the issue.

2018-01-30 15:44:40,107 level=INFO pid=4652 tid=MainThread logger=splunk_ta_gcp.modinputs.cloud_monitor pos=__init__.py:run:33 |  | message="Start google_cloud_monitor" 
2018-01-30 15:45:37,117 level=ERROR pid=4652 tid=MainThread logger=splunktalib pos=rest.py:do_splunkd_request:89 | Failed to send rest request=https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_google-cloudplatform/splunk_ta_google/google_credentials/?--get-clear-credential--=1, errcode=unknown, reason=Traceback (most recent call last):
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunktalib\rest.py", line 87, in do_splunkd_request
    data, timeout)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunktalib\rest.py", line 34, in httplib2_req
    splunkd_uri, method=method, headers=headers, body=data)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\3rdparty\httplib2\__init__.py", line 1659, in request
    (response, content) = self._request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\3rdparty\httplib2\__init__.py", line 1399, in _request
    (response, content) = self._conn_request(conn, request_uri, method, body, headers)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\3rdparty\httplib2\__init__.py", line 1355, in _conn_request
    response = conn.getresponse()
  File "E:\Splunk\Python-2.7\Lib\httplib.py", line 1121, in getresponse
    response.begin()
  File "E:\Splunk\Python-2.7\Lib\httplib.py", line 438, in begin
    version, status, reason = self._read_status()
  File "E:\Splunk\Python-2.7\Lib\httplib.py", line 394, in _read_status
    line = self.fp.readline(_MAXLINE + 1)
  File "E:\Splunk\Python-2.7\Lib\socket.py", line 480, in readline
    data = self._sock.recv(self._rbufsize)
  File "E:\Splunk\Python-2.7\Lib\ssl.py", line 766, in recv
    return self.read(buflen)
  File "E:\Splunk\Python-2.7\Lib\ssl.py", line 653, in read
    v = self._sslobj.read(len)
SSLError: ('The read operation timed out',)

2018-01-30 15:45:37,118 level=ERROR pid=4652 tid=MainThread logger=splunk_ta_gcp.modinputs.cloud_monitor pos=pattern.py:__call__:47 |  | message="Failed to execute function=run, error=Traceback (most recent call last):
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunktalib\common\pattern.py", line 44, in __call__
    return func(*args, **kwargs)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunk_ta_gcp\modinputs\cloud_monitor\__init__.py", line 35, in run
    mconf.GoogleCloudMonitorConfig, "google_cloud_monitor", logger)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunk_ta_gcp\legacy\common.py", line 108, in get_configs
    conf = ConfCls()
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunk_ta_gcp\modinputs\cloud_monitor\config.py", line 11, in __init__
    ggc.google_cloud_monitor)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunk_ta_gcp\legacy\config.py", line 28, in __init__
    self._task_configs = self._get_tasks()
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunk_ta_gcp\legacy\config.py", line 81, in _get_tasks
    self.metas[ggc.server_uri], self.metas[ggc.session_key])
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunk_ta_gcp\legacy\config.py", line 183, in get_google_creds
    "Check util log for more details".format(cred_name))
Exception: Failed to get google credentials for name=. Check util log for more details
" 
2018-01-30 15:45:48,645 level=INFO pid=8976 tid=MainThread logger=splunk_ta_gcp.modinputs.cloud_monitor pos=__init__.py:run:33 |  | message="Start google_cloud_monitor" 
2018-01-30 15:46:18,836 level=ERROR pid=8976 tid=MainThread logger=splunktalib pos=rest.py:do_splunkd_request:89 | Failed to send rest request=https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_google-cloudplatform/splunk_ta_google/google_settings?--get-clear-credential--=1, errcode=unknown, reason=Traceback (most recent call last):
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunktalib\rest.py", line 87, in do_splunkd_request
    data, timeout)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunktalib\rest.py", line 34, in httplib2_req
    splunkd_uri, method=method, headers=headers, body=data)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\3rdparty\httplib2\__init__.py", line 1659, in request
    (response, content) = self._request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\3rdparty\httplib2\__init__.py", line 1399, in _request
    (response, content) = self._conn_request(conn, request_uri, method, body, headers)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\3rdparty\httplib2\__init__.py", line 1355, in _conn_request
    response = conn.getresponse()
  File "E:\Splunk\Python-2.7\Lib\httplib.py", line 1121, in getresponse
    response.begin()
  File "E:\Splunk\Python-2.7\Lib\httplib.py", line 438, in begin
    version, status, reason = self._read_status()
  File "E:\Splunk\Python-2.7\Lib\httplib.py", line 394, in _read_status
    line = self.fp.readline(_MAXLINE + 1)
  File "E:\Splunk\Python-2.7\Lib\socket.py", line 480, in readline
    data = self._sock.recv(self._rbufsize)
  File "E:\Splunk\Python-2.7\Lib\ssl.py", line 766, in recv
    return self.read(buflen)
  File "E:\Splunk\Python-2.7\Lib\ssl.py", line 653, in read
    v = self._sslobj.read(len)
SSLError: ('The read operation timed out',)

2018-01-30 15:46:18,838 level=ERROR pid=8976 tid=MainThread logger=splunk_ta_gcp.modinputs.cloud_monitor pos=pattern.py:__call__:47 |  | message="Failed to execute function=run, error=Traceback (most recent call last):
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunktalib\common\pattern.py", line 44, in __call__
    return func(*args, **kwargs)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunk_ta_gcp\modinputs\cloud_monitor\__init__.py", line 35, in run
    mconf.GoogleCloudMonitorConfig, "google_cloud_monitor", logger)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunk_ta_gcp\legacy\common.py", line 108, in get_configs
    conf = ConfCls()
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunk_ta_gcp\modinputs\cloud_monitor\config.py", line 11, in __init__
    ggc.google_cloud_monitor)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunk_ta_gcp\legacy\config.py", line 28, in __init__
    self._task_configs = self._get_tasks()
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunk_ta_gcp\legacy\config.py", line 78, in _get_tasks
    self.metas[ggc.server_uri], self.metas[ggc.session_key])
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunk_ta_gcp\legacy\config.py", line 206, in get_global_settings
    "Check util log for more details %s" % url)
Exception: Failed to get google global settings.Check util log for more details https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_google-cloudplatform/splunk_ta_google/google_sett...
" 
2018-01-30 15:46:57,082 level=INFO pid=9672 tid=MainThread logger=splunk_ta_gcp.modinputs.cloud_monitor pos=__init__.py:run:33 |  | message="Start google_cloud_monitor" 
2018-01-30 15:47:27,858 level=ERROR pid=9672 tid=MainThread logger=splunktalib pos=rest.py:do_splunkd_request:89 | Failed to send rest request=https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_google-cloudplatform/splunk_ta_google/google_settings?--get-clear-credential--=1, errcode=unknown, reason=Traceback (most recent call last):
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunktalib\rest.py", line 87, in do_splunkd_request
    data, timeout)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\splunktalib\rest.py", line 34, in httplib2_req
    splunkd_uri, method=method, headers=headers, body=data)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\3rdparty\httplib2\__init__.py", line 1659, in request
    (response, content) = self._request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\3rdparty\httplib2\__init__.py", line 1399, in _request
    (response, content) = self._conn_request(conn, request_uri, method, body, headers)
  File "E:\Splunk\etc\apps\Splunk_TA_google-cloudplatform\bin\3rdparty\httplib2\__init__.py", line 1355, in _conn_request
    response = conn.getresponse()
  File "E:\Splunk\Python-2.7\Lib\httplib.py", line 1121, in getresponse
    response.begin()
  File "E:\Splunk\Python-2.7\Lib\httplib.py", line 438, in begin
    version, status, reason = self._read_status()
  File "E:\Splunk\Python-2.7\Lib\httplib.py", line 394, in _read_status
    line = self.fp.readline(_MAXLINE + 1)
  File "E:\Splunk\Python-2.7\Lib\socket.py", line 480, in readline
    data = self._sock.recv(self._rbufsize)
  File "E:\Splunk\Python-2.7\Lib\ssl.py", line 766, in recv
    return self.read(buflen)
  File "E:\Splunk\Python-2.7\Lib\ssl.py", line 653, in read
    v = self._sslobj.read(len)
SSLError: ('The read operation timed out',)
0 Karma

amiracle
Splunk Employee
Splunk Employee

Try not using the self-signed cert with Splunk and see if that fixes your SSL issue from GCP.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) v3.54.0

The Splunk Threat Research Team (STRT) recently released Enterprise Security Content Update (ESCU) v3.54.0 and ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...