Security

Data Uploader - why am i receiving a '('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))' error

gcarywhite
Explorer

Splunk is installed on a VM running CentOS release 6.6 .

I am using the Splunkweb Data Loader to upload files from my desktop.

I receive the following error for any file type (except zips) when using the Splunkweb Data Loader

'Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden'

Non-zip files show progress bar until 100% is reached and then display the error message above.

Zip files show a progress bar in a popup window and stay stuck at the 100% mark. The error message is never displayed for this file type.

However, SplunkWeb never moves to the Set Sourcetype option for any filetype.

i have no problems performing Searches or using other features of Splunk .

I set the HTTP_PROXY and HTTP_PROXY in splunk-launch.conf but this did not help.

I am new to Splunk and need to get it working for a proof-of-concept. Any help with this issue is greatly appreciated.

Tags (3)

dgrubb_splunk
Splunk Employee
Splunk Employee

What happens if you try and set this in splunk-launch.conf

no_proxy=127.0.0.1,localhost

cygnetix
Path Finder

That did the trick for me. I expect this is a bug though, I can't see why these proxy settings should influence the behavior of the "Add data" screen.

0 Karma

nanai
New Member

The solution mentioned here worked for me too.
Same problem occurred on my local (windows )machine while doing a tutorial. Version 7.x of splunk is running on my machine.

0 Karma

kishor_pinjark2
Path Finder

Worked for me also.

0 Karma

soul911
New Member

After modify the .conf and restart splunk, It works.

0 Karma

tnemil
New Member

i get further, but at Submit file step for indexing, it silently fails but see a message in splunkd.log

WARN HttpListener - Read Timeout communicating with , disconnecting

trying to see if another place need to tell splunk to use localhost NOT actual IP

0 Karma

dgrubb_splunk
Splunk Employee
Splunk Employee

because the apps are making calls to the management port of the local system.

0 Karma

mpo
New Member

Problem still exists with Splunk 6.3...
Removing the proxy from the config (splunk-launch.conf) fixes it as workaround.

But I'm just wondering, why Splunk is calling home, when I upload a new log...

0 Karma

madsurfer
Explorer

Facing the same issue this morning. Anybody?

0 Karma

gcarywhite
Explorer

Issue appeared to be related to the installation.

I had installed Splunk on this server using the rpm package
I uninstalled the package and removed the /opt/splunk folder

Recreated the folder and installed Splunk this time using tar file install

Data upload issues did not return. All seems well so far

0 Karma

donfranke12
New Member

I'm still having this issue. Reinstalling Splunk 6.2.2 did not solve the problem for me.

0 Karma

gcarywhite
Explorer

Adding more information from the web_service.log

015-02-03 11:58:30,066 INFO [54d0fe35fa7f43485b7e50] view:1084 - PERF - viewType=fastpath viewTime=0.0808s templateTime=0.0016s
2015-02-03 12:04:56,164 ERROR [54d0ffb8227f43700936d0] proxy:194 - ('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/proxy.py", line 157, in index
return self.uploadFile(args, sessionKey, uri)
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/proxy.py", line 261, in uploadFile
verify=False #allow self signed certificates
File "/opt/splunk/lib/python2.7/site-packages/requests/api.py", line 88, in post
return request('post', url, data=data, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/api.py", line 44, in request
return session.request(method=method, url=url, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/sessions.py", line 456, in request
resp = self.send(prep, **send_kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/sessions.py", line 559, in send
r = adapter.send(request, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/adapters.py", line 378, in send
raise ProxyError(e)
ProxyError: ('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))

0 Karma