Getting Data In

Get error message: command="darklist", 'URLError' object has no attribute 'code'

addproniklas
Engager

Hi,

Im getting a error message when running the savedsearch "Norse - Download Norse Darklist" after i have provided the app with an valid API key.
The error message is:

command="darklist", 'URLError' object has no attribute 'code'

Could someone please help me to figure out what im doing wrong and how to fix it?

BR
/Nik,Hi,

I'm trying to get the Norse App to work, but with no luck.
I've provided the app with my API key, but when i run the savedsearch "Norse - Download Norse Darklist" i get the following error message:

command="darklist", 'URLError' object has no attribute 'code'

Can you please help me to figure out what im doing wrong and what i can do to fix it?

Br
Nik

1 Solution

jcoates_splunk
Splunk Employee
Splunk Employee

Hi, we believe this to be because the Norse API has changed; the old API that this Add-on uses is no longer functional. This Add-on is consequently at its end of life... We believe it will need restructuring to be usable with the new API.

View solution in original post

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

Hi, we believe this to be because the Norse API has changed; the old API that this Add-on uses is no longer functional. This Add-on is consequently at its end of life... We believe it will need restructuring to be usable with the new API.

0 Karma

baldwintm
Path Finder

It looks like this is trying to connect to http://darklist.ipviking.net/slice
The connection is timing out. It looks like that server is no longer listening on port 80.
(It currently resolves to: 64.19.78.10)

0 Karma

subnet
New Member

Could be a bandwidth or connection issue if you are going through a proxy. Try running

| norse_download_darklist | outputlookup norse_darklist_lookup

If you still have issue, then most likely bandwidth/connection.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...