Getting Data In

(Caused by ProxyError('Cannot connect to proxy.', NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object

rayar
Contributor

we have heavy forwarder with splunk_ta_o365 installed 

the integration is working for some time and after some time I am starting getting the below till the next Linux reboot (after the restart the integration starting working )

 


2020-07-16 03:05:02,350 level=ERROR pid=15582 tid=MainThread logger=splunk_ta_o365.modinputs.service_status pos=utils.py:wrapper:67 | datainput="ServiceStatus" start_time=1594857902 | message="Data input was interrupted by an unhandled exception."
Traceback (most recent call last):
File "/opt/splunk/etc/apps/splunk_ta_o365/bin/splunksdc/utils.py", line 65, in wrapper
return func(*args, **kwargs)
File "/opt/splunk/etc/apps/splunk_ta_o365/bin/splunk_ta_o365/modinputs/service_status.py", line 135, in run
session = token.auth(session)
File "/opt/splunk/etc/apps/splunk_ta_o365/bin/splunk_ta_o365/common/token.py", line 56, in auth
self._token = self._policy(self._resource, session)
File "/opt/splunk/etc/apps/splunk_ta_o365/bin/splunk_ta_o365/common/token.py", line 37, in __call__
return self._portal.get_token_by_psk(self._client_id, self._client_secret, resource, session)
File "/opt/splunk/etc/apps/splunk_ta_o365/bin/splunk_ta_o365/common/portal.py", line 86, in get_token_by_psk
'resource': resource
File "/opt/splunk/etc/apps/splunk_ta_o365/bin/3rdparty/requests/sessions.py", line 555, in post
return self.request('POST', url, data=data, json=json, **kwargs)
File "/opt/splunk/etc/apps/splunk_ta_o365/bin/3rdparty/requests/sessions.py", line 508, in request
resp = self.send(prep, **send_kwargs)
File "/opt/splunk/etc/apps/splunk_ta_o365/bin/3rdparty/requests/sessions.py", line 618, in send
r = adapter.send(request, **kwargs)
File "/opt/splunk/etc/apps/splunk_ta_o365/bin/3rdparty/requests/adapters.py", line 502, in send
raise ProxyError(e, request=request)
ProxyError: HTTPSConnectionPool(host='login.microsoftonline.com', port=443): Max retries exceeded with url: /c8eca3ca-1276-46d5-9d9d-a0f2a028920f/oauth2/token (Caused by ProxyError('Cannot connect to proxy.', NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7fac68273310>: Failed to establish a new connection: [Errno -2] Name or service not known',)))
2020-07-16 03:05:02,351 level=INFO pid=15582 tid=MainThread logger=splunksdc.collector pos=collector.py:run:248 | | message="Modular input exited."
2020-07-16 03:10:04,245 level=INFO pid=19359 tid=MainThread logger=splunksdc.collector pos=collector.py:run:245 | | message="Modular input started."
2020-07-16 03:10:04,259 level=INFO pid=19359 tid=MainThread logger=splunk_ta_o365.common.settings pos=settings.py:load:29 | start_time=1594858204 datainput="ServiceStatus" | message="Load proxy settings success." username="" host="10.232.233.70" enabled=True port="8080"

Labels (1)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...