Security

Assets and Identities _reload failing

TiagoTLD3
Engager

Hello! Since 7.3.0 I'm seeing the reload process for assets and identities failing frequently. Any ideas?

 

RROR pid=20559 tid=MainThread file=base_modinput.py:execute:820 | Execution failed: 'SplunkdConnectionException' object has no attribute 'get_message_text'
Traceback (most recent call last):
  File "/app/splunk/lib/python3.7/site-packages/splunk/rest/__init__.py", line 601, in simpleRequest
    serverResponse, serverContent = h.request(uri, method, headers=headers, body=payload)
  File "/app/splunk/lib/python3.7/site-packages/httplib2/__init__.py", line 1710, in request
    conn, authority, uri, request_uri, method, body, headers, redirections, cachekey,
  File "/app/splunk/lib/python3.7/site-packages/httplib2/__init__.py", line 1425, in _request
    (response, content) = self._conn_request(conn, request_uri, method, body, headers)
  File "/app/splunk/lib/python3.7/site-packages/httplib2/__init__.py", line 1377, in _conn_request
    response = conn.getresponse()
  File "/app/splunk/lib/python3.7/http/client.py", line 1373, in getresponse
    response.begin()
  File "/app/splunk/lib/python3.7/http/client.py", line 319, in begin
    version, status, reason = self._read_status()
  File "/app/splunk/lib/python3.7/http/client.py", line 280, in _read_status
    line = str(self.fp.readline(_MAXLINE + 1), "iso-8859-1")
  File "/app/splunk/lib/python3.7/socket.py", line 589, in readinto
    return self._sock.recv_into(b)
  File "/app/splunk/lib/python3.7/ssl.py", line 1079, in recv_into
    return self.read(nbytes, buffer)
  File "/app/splunk/lib/python3.7/ssl.py", line 937, in read
    return self._sslobj.read(len, buffer)
socket.timeout: The read operation timed out
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
  File "/app/splunk/etc/apps/SA-IdentityManagement/bin/identity_manager.py", line 483, in reload_settings
    raiseAllErrors=True
  File "/app/splunk/lib/python3.7/site-packages/splunk/rest/__init__.py", line 613, in simpleRequest
    raise splunk.SplunkdConnectionException('Error connecting to %s: %s' % (path, str(e)))
splunk.SplunkdConnectionException: Splunkd daemon is not responding: ('Error connecting to /services/identity_correlation/identity_manager/_reload: The read operation timed out',)
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
  File "/app/splunk/etc/apps/SA-Utils/lib/SolnCommon/modinput/base_modinput.py", line 811, in execute
    log_exception_and_continue=True
  File "/app/splunk/etc/apps/SA-Utils/lib/SolnCommon/modinput/base_modinput.py", line 380, in do_run
    self.run(stanzas)
  File "/app/splunk/etc/apps/SA-IdentityManagement/bin/identity_manager.py", line 586, in run
    reload_success = self.reload_settings()
  File "/app/splunk/etc/apps/SA-IdentityManagement/bin/identity_manager.py", line 486, in reload_settings
    logger.error('status="Failed to reload settings" error="%s"', e.get_message_text())
AttributeError: 'SplunkdConnectionException' object has no attribute 'get_message_text'

 

 

Labels (1)
0 Karma

conflaw
Observer

I started noticing this error recently too, and found the following (old) Community post that pointed my in the direction of splunkd web timeout:

https://community.splunk.com/t5/All-Apps-and-Add-ons/Error-while-installing-an-app-on-Splunk-6-on-Wi...

Sure enough I had the default 30 seconds in place, and after increasing that (and restarting Splunk) I haven't observed the message.

 


@TiagoTLD3 wrote:

Hello! Since 7.3.0 I'm seeing the reload process for assets and identities failing frequently. Any ideas?

 

 

 

RROR pid=20559 tid=MainThread file=base_modinput.py:execute:820 | Execution failed: 'SplunkdConnectionException' object has no attribute 'get_message_text'
Traceback (most recent call last):
  File "/app/splunk/lib/python3.7/site-packages/splunk/rest/__init__.py", line 601, in simpleRequest
    serverResponse, serverContent = h.request(uri, method, headers=headers, body=payload)
  File "/app/splunk/lib/python3.7/site-packages/httplib2/__init__.py", line 1710, in request
    conn, authority, uri, request_uri, method, body, headers, redirections, cachekey,
  File "/app/splunk/lib/python3.7/site-packages/httplib2/__init__.py", line 1425, in _request
    (response, content) = self._conn_request(conn, request_uri, method, body, headers)
  File "/app/splunk/lib/python3.7/site-packages/httplib2/__init__.py", line 1377, in _conn_request
    response = conn.getresponse()
  File "/app/splunk/lib/python3.7/http/client.py", line 1373, in getresponse
    response.begin()
  File "/app/splunk/lib/python3.7/http/client.py", line 319, in begin
    version, status, reason = self._read_status()
  File "/app/splunk/lib/python3.7/http/client.py", line 280, in _read_status
    line = str(self.fp.readline(_MAXLINE + 1), "iso-8859-1")
  File "/app/splunk/lib/python3.7/socket.py", line 589, in readinto
    return self._sock.recv_into(b)
  File "/app/splunk/lib/python3.7/ssl.py", line 1079, in recv_into
    return self.read(nbytes, buffer)
  File "/app/splunk/lib/python3.7/ssl.py", line 937, in read
    return self._sslobj.read(len, buffer)
socket.timeout: The read operation timed out
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
  File "/app/splunk/etc/apps/SA-IdentityManagement/bin/identity_manager.py", line 483, in reload_settings
    raiseAllErrors=True
  File "/app/splunk/lib/python3.7/site-packages/splunk/rest/__init__.py", line 613, in simpleRequest
    raise splunk.SplunkdConnectionException('Error connecting to %s: %s' % (path, str(e)))
splunk.SplunkdConnectionException: Splunkd daemon is not responding: ('Error connecting to /services/identity_correlation/identity_manager/_reload: The read operation timed out',)
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
  File "/app/splunk/etc/apps/SA-Utils/lib/SolnCommon/modinput/base_modinput.py", line 811, in execute
    log_exception_and_continue=True
  File "/app/splunk/etc/apps/SA-Utils/lib/SolnCommon/modinput/base_modinput.py", line 380, in do_run
    self.run(stanzas)
  File "/app/splunk/etc/apps/SA-IdentityManagement/bin/identity_manager.py", line 586, in run
    reload_success = self.reload_settings()
  File "/app/splunk/etc/apps/SA-IdentityManagement/bin/identity_manager.py", line 486, in reload_settings
    logger.error('status="Failed to reload settings" error="%s"', e.get_message_text())
AttributeError: 'SplunkdConnectionException' object has no attribute 'get_message_text'

 

 

 

 




0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...