Splunk is installed on a VM running CentOS release 6.6 .
I am using the Splunkweb Data Loader to upload files from my desktop.
I receive the following error for any file type (except zips) when using the Splunkweb Data Loader
'Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden'
Non-zip files show progress bar until 100% is reached and then display the error message above.
Zip files show a progress bar in a popup window and stay stuck at the 100% mark. The error message is never displayed for this file type.
However, SplunkWeb never moves to the Set Sourcetype option for any filetype.
i have no problems performing Searches or using other features of Splunk .
I set the HTTP_PROXY and HTTP_PROXY in splunk-launch.conf but this did not help.
I am new to Splunk and need to get it working for a proof-of-concept. Any help with this issue is greatly appreciated.
i get further, but at Submit file step for indexing, it silently fails but see a message in splunkd.log
WARN HttpListener - Read Timeout communicating with , disconnecting
trying to see if another place need to tell splunk to use localhost NOT actual IP
Problem still exists with Splunk 6.3...
Removing the proxy from the config (splunk-launch.conf) fixes it as workaround.
But I'm just wondering, why Splunk is calling home, when I upload a new log...
Issue appeared to be related to the installation.
I had installed Splunk on this server using the rpm package
I uninstalled the package and removed the /opt/splunk folder
Recreated the folder and installed Splunk this time using tar file install
Data upload issues did not return. All seems well so far
Adding more information from the web_service.log
015-02-03 11:58:30,066 INFO [54d0fe35fa7f43485b7e50] view:1084 - PERF - viewType=fastpath viewTime=0.0808s templateTime=0.0016s
2015-02-03 12:04:56,164 ERROR [54d0ffb8227f43700936d0] proxy:194 - ('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/proxy.py", line 157, in index
return self.uploadFile(args, sessionKey, uri)
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/proxy.py", line 261, in uploadFile
verify=False #allow self signed certificates
File "/opt/splunk/lib/python2.7/site-packages/requests/api.py", line 88, in post
return request('post', url, data=data, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/api.py", line 44, in request
return session.request(method=method, url=url, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/sessions.py", line 456, in request
resp = self.send(prep, **send_kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/sessions.py", line 559, in send
r = adapter.send(request, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/adapters.py", line 378, in send
ProxyError: ('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))