Security

Data Uploader - why am i receiving a '('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))' error

Explorer

Splunk is installed on a VM running CentOS release 6.6 .

I am using the Splunkweb Data Loader to upload files from my desktop.

I receive the following error for any file type (except zips) when using the Splunkweb Data Loader

'Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden'

Non-zip files show progress bar until 100% is reached and then display the error message above.

Zip files show a progress bar in a popup window and stay stuck at the 100% mark. The error message is never displayed for this file type.

However, SplunkWeb never moves to the Set Sourcetype option for any filetype.

i have no problems performing Searches or using other features of Splunk .

I set the HTTP_PROXY and HTTP_PROXY in splunk-launch.conf but this did not help.

I am new to Splunk and need to get it working for a proof-of-concept. Any help with this issue is greatly appreciated.

Tags (3)

Splunk Employee
Splunk Employee

What happens if you try and set this in splunk-launch.conf

no_proxy=127.0.0.1,localhost

Path Finder

That did the trick for me. I expect this is a bug though, I can't see why these proxy settings should influence the behavior of the "Add data" screen.

0 Karma

New Member

The solution mentioned here worked for me too.
Same problem occurred on my local (windows )machine while doing a tutorial. Version 7.x of splunk is running on my machine.

0 Karma

Path Finder

Worked for me also.

0 Karma

New Member

After modify the .conf and restart splunk, It works.

0 Karma

New Member

i get further, but at Submit file step for indexing, it silently fails but see a message in splunkd.log

WARN HttpListener - Read Timeout communicating with , disconnecting

trying to see if another place need to tell splunk to use localhost NOT actual IP

0 Karma

Splunk Employee
Splunk Employee

because the apps are making calls to the management port of the local system.

0 Karma

New Member

Problem still exists with Splunk 6.3...
Removing the proxy from the config (splunk-launch.conf) fixes it as workaround.

But I'm just wondering, why Splunk is calling home, when I upload a new log...

0 Karma

Explorer

Facing the same issue this morning. Anybody?

0 Karma

Explorer

Issue appeared to be related to the installation.

I had installed Splunk on this server using the rpm package
I uninstalled the package and removed the /opt/splunk folder

Recreated the folder and installed Splunk this time using tar file install

Data upload issues did not return. All seems well so far

0 Karma

New Member

I'm still having this issue. Reinstalling Splunk 6.2.2 did not solve the problem for me.

0 Karma

Explorer

Adding more information from the web_service.log

015-02-03 11:58:30,066 INFO [54d0fe35fa7f43485b7e50] view:1084 - PERF - viewType=fastpath viewTime=0.0808s templateTime=0.0016s
2015-02-03 12:04:56,164 ERROR [54d0ffb8227f43700936d0] proxy:194 - ('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/proxy.py", line 157, in index
return self.uploadFile(args, sessionKey, uri)
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/proxy.py", line 261, in uploadFile
verify=False #allow self signed certificates
File "/opt/splunk/lib/python2.7/site-packages/requests/api.py", line 88, in post
return request('post', url, data=data, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/api.py", line 44, in request
return session.request(method=method, url=url, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/sessions.py", line 456, in request
resp = self.send(prep, **send_kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/sessions.py", line 559, in send
r = adapter.send(request, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/adapters.py", line 378, in send
raise ProxyError(e)
ProxyError: ('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!