Developing for Splunk Enterprise

Exception when i try to extract fields in the web interface


No matter on what message i try to extract fileds i end up with a short Python exception (Error 500):

AttributeError: 'str' object has no attribute 'toPrimitive'

Here's the full exception:

2010-10-14 14:44:00,261 INFO    [4cb6fb0ef723b24d0] FieldLearning:56 - GENERATING RULES FROM 100 EVENTS
2010-10-14 14:44:00,994 WARNING [4cb6fb0ef723b24d0] format:47 - There was an error parsing the feed document. Error: PCDATA invalid Char value 27, line 24899, column 44
2010-10-14 14:44:00,995 INFO    [4cb6fb0ef723b24d0] _cplogging:55 - [14/Oct/2010:14:44:00] HTTP 
Request Headers:
  ACCEPT: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
  ACCEPT-CHARSET: ISO-8859-1,utf-8;q=0.7,*;q=0.3
  USER-AGENT: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_4; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.472.63 Safari/534.3
  CONNECTION: keep-alive
  COOKIE: session_id_8000=d350af526b47d6a37201356333c4206785356e8e
  ACCEPT-LANGUAGE: en-US,en;q=0.8
  ACCEPT-ENCODING: gzip,deflate,sdch
2010-10-14 14:44:00,995 DEBUG   [4cb6fb0ef723b24d0] _cplogging:55 - [14/Oct/2010:14:44:00] HTTP Traceback (most recent call last):
  File "/data/splunk/lib/python2.6/site-packages/cherrypy/", line 606, in respond
    cherrypy.response.body = self.handler()
  File "/data/splunk/lib/python2.6/site-packages/cherrypy/", line 25, in __call__
    return self.callable(*self.args, **self.kwargs)
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/", line 307, in default
    return, **kw)
  File "<string>", line 1, in <lambda>
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/", line 38, in rundecs
    return fn(*a, **kw)
  File "<string>", line 1, in <lambda>
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/", line 93, in check
    return fn(self, *a, **kw)
  File "<string>", line 1, in <lambda>
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/", line 141, in validate_ip
    return fn(self, *a, **kw)
  File "<string>", line 1, in <lambda>
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/", line 275, in preform_sso_check
    return fn(self, *a, **kw)
  File "<string>", line 1, in <lambda>
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/", line 312, in check_login
    return fn(self, *a, **kw)
  File "<string>", line 1, in <lambda>
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/", line 333, in handle_exceptions
    return fn(self, *a, **kw)
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/controllers/", line 97, in index
    if not fieldNameExtractionExists(args, regex):
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/controllers/", line 414, in fieldNameExtractionExists
    props = bundle.getConf('props', sessionkey, namespace, owner)
  File "/data/splunk/lib/python2.6/site-packages/splunk/", line 46, in getConf
    stanzas = confFeed.toPrimitive()
AttributeError: 'str' object has no attribute 'toPrimitive'



Tags (1)


I recommend contacting Splunk support about this issue.