Archive
Highlighted

Cloud splunk-S3 bucket Failed to collect s3 data

New Member

Hi all ,
I have configured my splunk- aws add on and aws app . But I am getting the following error in /opt/splunk/var/log/splunk/splunktaawss3main.log -

ERROR pid=16834 tid=MainThread file=awss3.py:run:132 | Failed to collect s3 data, error=Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk
TAaws/bin/awss3.py", line 129, in run
dorun()
File "/opt/splunk/etc/apps/SplunkTAaws/bin/awss3.py", line 100, in _dorun
asconfig.AWSS3Conf, "awss3", logger)
File "/opt/splunk/etc/apps/Splunk
TAaws/bin/taaws/taawscommon.py", line 117, in getconfigs
tasks = conf.gettasks()
File "/opt/splunk/etc/apps/Splunk
TAaws/bin/s3mod/awss3conf.py", line 73, in gettasks
task[asc.initial
scandatetime])
File "/opt/splunk/etc/apps/Splunk
TAaws/bin/s3mod/awss3conf.py", line 91, in getlastmodifiedtime
scandatetime)
File "/opt/splunk/etc/apps/Splunk
TAaws/bin/taaws/taawscommon.py", line 182, in parsedatetime
r = endpoint.get(time=timestr, outputtimeformat="%s")
File "/opt/splunk/etc/apps/Splunk
TAaws/bin/splunklib/client.py", line 688, in get
**query)
File "/opt/splunk/etc/apps/Splunk
TAaws/bin/splunklib/binding.py", line 237, in wrapper
return request
fun(self, args, *kwargs)
File "/opt/splunk/etc/apps/SplunkTAaws/bin/splunklib/binding.py", line 61, in newf
val = f(args, *kwargs)
File "/opt/splunk/etc/apps/Splunk
TAaws/bin/splunklib/binding.py", line 582, in get
response = self.http.get(path, self.
authheaders, **query)
File "/opt/splunk/etc/apps/Splunk
TAaws/bin/splunklib/binding.py", line 1053, in get
return self.request(url, { 'method': "GET", 'headers': headers })
File "/opt/splunk/etc/apps/Splunk
TA_aws/bin/splunklib/binding.py", line 1108, in request
raise HTTPError(response)
HTTPError: HTTP 400 Bad Request -- Invalid time.

I have given proper bucket policies to my s3 bucket.

Any pointers will be appreciable.

Tags (1)
0 Karma
Highlighted

Re: Cloud splunk-S3 bucket Failed to collect s3 data

Splunk Employee
Splunk Employee

We are having this same issue. Was anyone able to make progress on this.

0 Karma