Loading the Configuration page from the Splunk_TA_snow ServiceNow TA yields the following error:
index=_internal sourcetype="ta_snow"
2022-08-24 13:52:12,894 INFO pid=[xxx] tid=MainThread file=snow.py:stream_events:430 | No configured inputs found. To collect data from ServiceNow, configure new input(s) or update existing input(s) either from Inputs page of the Add-on or manually from inputs.conf.
Splunkd errors show:
requests.exceptions.ConnectionError: ('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))
raise ConnectionError(err, request=request)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/adapters.py", line 501, in send
r = adapter.send(request, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/sessions.py", line 645, in send
resp = self.send(prep, **send_kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/sessions.py", line 529, in request
return session.request(method=method, url=url, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/api.py", line 61, in request
**kwargs,
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/solnlib/splunk_rest_client.py", line 147, in request
response = self.handler(url, message, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/binding.py", line 1279, in request
return self.request(url, { 'method': "GET", 'headers': headers })
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/binding.py", line 1219, in get
response = self.http.get(path, all_headers, **query)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/binding.py", line 685, in get
val = f(*args, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/binding.py", line 70, in new_f
return request_fun(self, *args, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/binding.py", line 289, in wrapper
**query)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/client.py", line 795, in get
return super(Collection, self).get(name, owner, app, sharing, **query)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/client.py", line 1702, in get
response = self.get(key)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/splunklib/client.py", line 1740, in __getitem__
conf = self._confs[name]
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/solnlib/conf_manager.py", line 457, in get_conf
return func(*args, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/solnlib/utils.py", line 153, in wrapper
Traceback (most recent call last):
During handling of the above exception, another exception occurred:
urllib3.exceptions.ProtocolError: ('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))
return self._sock.recv_into(b)
File "/opt/splunk/lib/python3.7/socket.py", line 589, in readinto
line = str(self.fp.readline(_MAXLINE + 1), "iso-8859-1")
File "/opt/splunk/lib/python3.7/http/client.py", line 280, in _read_status
version, status, reason = self._read_status()
File "/opt/splunk/lib/python3.7/http/client.py", line 319, in begin
response.begin()
File "/opt/splunk/lib/python3.7/http/client.py", line 1373, in getresponse
httplib_response = conn.getresponse()
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 444, in _make_request
File "<string>", line 3, in raise_from
six.raise_from(e, None)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 449, in _make_request
chunked=chunked,
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 710, in urlopen
raise value.with_traceback(tb)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/packages/six.py", line 769, in reraise
raise six.reraise(type(error), error, _stacktrace)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/util/retry.py", line 550, in increment
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 786, in urlopen
timeout=timeout
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/adapters.py", line 450, in send
Traceback (most recent call last):
During handling of the above exception, another exception occurred:
ConnectionResetError: [Errno 104] Connection reset by peer
return self._sock.recv_into(b)
File "/opt/splunk/lib/python3.7/socket.py", line 589, in readinto
line = str(self.fp.readline(_MAXLINE + 1), "iso-8859-1")
File "/opt/splunk/lib/python3.7/http/client.py", line 280, in _read_status
version, status, reason = self._read_status()
File "/opt/splunk/lib/python3.7/http/client.py", line 319, in begin
response.begin()
File "/opt/splunk/lib/python3.7/http/client.py", line 1373, in getresponse
httplib_response = conn.getresponse()
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 444, in _make_request
File "<string>", line 3, in raise_from
six.raise_from(e, None)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 449, in _make_request
chunked=chunked,
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/urllib3/connectionpool.py", line 710, in urlopen
WARNING:root:Run function: get_conf failed: Traceback (most recent call last):
requests.exceptions.ConnectionError: ('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))
raise ConnectionError(err, request=request)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/adapters.py", line 501, in send
r = adapter.send(request, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/sessions.py", line 645, in send
resp = self.send(prep, **send_kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/sessions.py", line 529, in request
return session.request(method=method, url=url, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/requests/api.py", line 61, in request
**kwargs,
File "/opt/splunk/etc/apps/Splunk_TA_snow/lib/solnlib/splunk_rest_client.py", line 147, in request
Traceback (most recent call last):
During handling of the above exception, another exception occurred:
urllib3.exceptions.ProtocolError: ('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))
return self._sock.recv_into(b)
File "/opt/splunk/lib/python3.7/socket.py", line 589, in readinto
line = str(self.fp.readline(_MAXLINE + 1), "iso-8859-1")
File "/opt/splunk/lib/python3.7/http/client.py", line 280, in _read_status
version, status, reason = self._read_status()
File "/opt/splunk/lib/python3.7/http/client.py", line 319, in begin
response.begin()
File "/opt/splunk/lib/python3.7/http/client.py", line 1373, in getresponse
httplib_response = conn.getresponse()
I ran into the same issue for Falcon Crowdstrike Event Streams and the Splunk Add-On for AWS on my Heavy Forwarders. This indicates it was likely a Splunk config issue, rather than a Splunk app issue.
Splunk Support recommended the following, which fixed the problem right away.
The value for one of the parameters in the server.conf file is not set up in the expected format.
Please perform the below steps in your HF in which the Box add-on UI page(s) are not loading properly:
1.Go to /splunk/etc/system/local/server.conf file.
2.Update the value of the enableSplunkdSSL parameter from True to true on the [sslConfig] stanza.
3.Restart the HF.
If your server.conf file doesn't specifically have an invalid enableSplunkdSSL attribute, then I suspect that your issue may be some other SSL configuration.
It's worth noting too that using splunk cmd btool check --debug did not detect this issue during troubleshooting.
Hi
I register the same Error Message on other TA's.
It seems to be a problem in Python.
I am having the same issue and have tried installing on multiple HFs, either of you able to resolve this?
I got the exact same error. Were you able to resolve it? My error code for 500 is ERR0005