Getting Data In

How to resolve: ServiceNow TA Error "Failed to load current state for selected entity in form!"

landen99
Motivator

Loading the Configuration page from the Splunk_TA_snow ServiceNow TA yields the following error:

Something went wrong!

Failed to load current state for selected entity in form!

Error: Request failed with status code 500
ERR0005
 
Similarly for the inputs page yields the following error:

Failed to load Inputs Page

This is normal on Splunk search heads as they do not require an Input page. Check your installation or return to the configuration page.

Error: Request failed with status code 500
ERR0001
 
The troubleshooting documentation only mentions something about using the admin  account, which we are:
SNOW internal logs only show this error:
 

 

 

index=_internal sourcetype="ta_snow"
2022-08-24 13:52:12,894 INFO pid=[xxx] tid=MainThread file=snow.py:stream_events:430 | No configured inputs found. To collect data from ServiceNow, configure new input(s) or update existing input(s) either from Inputs page of the Add-on or manually from inputs.conf.

 

 

Splunkd errors show:

 

 

 

requests.exceptions.ConnectionError: ('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))
raise ConnectionError(err, request=request)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/adapters.py", line 501, in send
r = adapter.send(request, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/sessions.py", line 645, in send
resp = self.send(prep, **send_kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/sessions.py", line 529, in request
return session.request(method=method, url=url, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/api.py", line 61, in request
**kwargs,
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/solnlib/splunk_rest_client.py", line 147, in request
response = self.handler(url, message, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/binding.py", line 1279, in request
return self.request(url, { 'method': "GET", 'headers': headers })
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/binding.py", line 1219, in get
response = self.http.get(path, all_headers, **query)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/binding.py", line 685, in get
val = f(*args, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/binding.py", line 70, in new_f
return request_fun(self, *args, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/binding.py", line 289, in wrapper
**query)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/client.py", line 795, in get
return super(Collection, self).get(name, owner, app, sharing, **query)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/client.py", line 1702, in get
response = self.get(key)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/client.py", line 1740, in __getitem__
conf = self._confs[name]
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/solnlib/conf_manager.py", line 457, in get_conf
return func(*args, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/solnlib/utils.py", line 153, in wrapper
Traceback (most recent call last):
During handling of the above exception, another exception occurred:
urllib3.exceptions.ProtocolError: ('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))
return self._sock.recv_into(b)
File "/opt/splunk/lib/python3.7/socket.py", line 589, in readinto
line = str(self.fp.readline(_MAXLINE + 1), "iso-8859-1")
File "/opt/splunk/lib/python3.7/http/client.py", line 280, in _read_status
version, status, reason = self._read_status()
File "/opt/splunk/lib/python3.7/http/client.py", line 319, in begin
response.begin()
File "/opt/splunk/lib/python3.7/http/client.py", line 1373, in getresponse
httplib_response = conn.getresponse()
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 444, in _make_request
File "<string>", line 3, in raise_from
six.raise_from(e, None)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 449, in _make_request
chunked=chunked,
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 710, in urlopen
raise value.with_traceback(tb)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/packages/six.py", line 769, in reraise
raise six.reraise(type(error), error, _stacktrace)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/util/retry.py", line 550, in increment
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 786, in urlopen
timeout=timeout
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/adapters.py", line 450, in send
Traceback (most recent call last):
During handling of the above exception, another exception occurred:
ConnectionResetError: [Errno 104] Connection reset by peer
return self._sock.recv_into(b)
File "/opt/splunk/lib/python3.7/socket.py", line 589, in readinto
line = str(self.fp.readline(_MAXLINE + 1), "iso-8859-1")
File "/opt/splunk/lib/python3.7/http/client.py", line 280, in _read_status
version, status, reason = self._read_status()
File "/opt/splunk/lib/python3.7/http/client.py", line 319, in begin
response.begin()
File "/opt/splunk/lib/python3.7/http/client.py", line 1373, in getresponse
httplib_response = conn.getresponse()
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 444, in _make_request
File "<string>", line 3, in raise_from
six.raise_from(e, None)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 449, in _make_request
chunked=chunked,
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 710, in urlopen
WARNING:root:Run function: get_conf failed: Traceback (most recent call last):
requests.exceptions.ConnectionError: ('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))
raise ConnectionError(err, request=request)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/adapters.py", line 501, in send
r = adapter.send(request, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/sessions.py", line 645, in send
resp = self.send(prep, **send_kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/sessions.py", line 529, in request
return session.request(method=method, url=url, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/api.py", line 61, in request
**kwargs,
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/solnlib/splunk_rest_client.py", line 147, in request
Traceback (most recent call last):
During handling of the above exception, another exception occurred:
urllib3.exceptions.ProtocolError: ('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))
return self._sock.recv_into(b)
File "/opt/splunk/lib/python3.7/socket.py", line 589, in readinto
line = str(self.fp.readline(_MAXLINE + 1), "iso-8859-1")
File "/opt/splunk/lib/python3.7/http/client.py", line 280, in _read_status
version, status, reason = self._read_status()
File "/opt/splunk/lib/python3.7/http/client.py", line 319, in begin
response.begin()
File "/opt/splunk/lib/python3.7/http/client.py", line 1373, in getresponse
httplib_response = conn.getresponse()

 

 

 
How do we troubleshoot and solve this?
Labels (2)
0 Karma

alecvogelsang-d
New Member

I ran into the same issue for Falcon Crowdstrike Event Streams and the Splunk Add-On for AWS on my Heavy Forwarders. This indicates it was likely a Splunk config issue, rather than a Splunk app issue.

 

Splunk Support recommended the following, which fixed the problem right away.

The value for one of the parameters in the server.conf file is not set up in the expected format. 

Please perform the below steps in your HF in which the Box add-on UI page(s) are not loading properly:

1.Go to /splunk/etc/system/local/server.conf file.

2.Update the value of the enableSplunkdSSL parameter from True to true on the [sslConfig] stanza.

3.Restart the HF.

If your server.conf file doesn't specifically have an invalid enableSplunkdSSL attribute, then I suspect that your issue may be some other SSL configuration.

It's worth noting too that using splunk cmd btool check --debug did not detect this issue during troubleshooting.

0 Karma

patrickvanreck
Loves-to-Learn

Hi

I register the same Error Message on other TA's.
It seems to be a problem in Python. 

0 Karma

JaysunFL
New Member

I am having the same issue and have tried installing on multiple HFs, either of you able to resolve this?

0 Karma

isauadh
New Member

I got the exact same error. Were you able to resolve it? My error code for 500 is ERR0005

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...