Security

Splunk for Twitter authentication error

Blu3fish
Path Finder

Downloaded the Twitter app over the weekend on a splunkbeta instance I have running and all went well but when I tried installing the app on my 4.1.5 and 4.1.6 instances I ran into a configuration error where it is no longer allowing me to enter my splunk credentials.

alt text

As expected splunkd.log has a lot of the following messages:

ERROR ExecProcessor - message from "python /Applications/splunk/etc/apps/twitter/bin/splunk_twitter_streamer.py" Could not get Twitter credentials from splunk. Error: [HTTP 500] Splunkd internal error; [{'text': "In handler 'passwords': Admin handler 'passwords' not found.", 'code': None, 'type': 'ERROR'}]

Anyone else experiencing this? Anyone know of a workaround? Any help is appreciated.

Tags (2)

amiracle
Splunk Employee
Splunk Employee

I figured out a way to get the twitter app to work with the Splunk Modular REST API. Here is a link to the fix.

http://splunk-base.splunk.com/answers/58689/issue-with-twitter-app-installation?page=1&focusedAnswer...

0 Karma

marcoscala
Builder

Those are the errors I got instead: (Splunk 4.3.4 running on Mac OSX 10.7.4):

09-22-2012 11:42:06.218 +0200 WARN SetupAdminHandler - Cannot find entity=''
09-22-2012 11:42:06.218 +0200 WARN SetupAdminHandler - Cannot find field='name' in url='/admin/passwords/_new/' setting value to empty string
09-22-2012 11:42:08.997 +0200 INFO ExecProcessor - Ran script: python /usr/local/splunk/etc/apps/twitter/bin/splunk_twitter_streamer.py, took 265.2 milliseconds to run, 0
bytes read, exited with code 1
09-22-2012 11:42:08.997 +0200 ERROR ExecProcessor - message from "python /usr/local/splunk/etc/apps/twitter/bin/splunk_twitter_streamer.py" Could not get Twitter credential
s from splunk. Error: No credentials supplied, please complete the Twitter app setup
09-22-2012 11:42:14.983 +0200 WARN SetupAdminHandler - Cannot find entity='
'
09-22-2012 11:42:14.983 +0200 WARN SetupAdminHandler - Cannot find field='name' in url='/admin/passwords/_new/' setting value to empty string
09-22-2012 11:42:15.014 +0200 WARN SetupAdminHandler - Cannot find entity=''
09-22-2012 11:42:15.015 +0200 WARN SetupAdminHandler - Cannot find field='name' in url='/admin/passwords/_new/' setting value to empty string
09-22-2012 11:42:15.094 +0200 INFO ExecProcessor - New scheduled exec process: python /usr/local/splunk/etc/apps/twitter/bin/splunk_twitter_streamer.py
09-22-2012 11:42:15.094 +0200 INFO ExecProcessor - interval: 30000 ms
09-22-2012 11:42:15.116 +0200 WARN SetupAdminHandler - Cannot find entity='
'
09-22-2012 11:42:15.116 +0200 WARN SetupAdminHandler - Cannot find field='name' in url='/admin/passwords/_new/' setting value to empty string
09-22-2012 11:42:32.850 +0200 WARN SetupAdminHandler - Cannot find entity=''
09-22-2012 11:42:32.851 +0200 WARN SetupAdminHandler - Cannot find field='name' in url='/admin/passwords/_new/' setting value to empty string
09-22-2012 11:42:32.882 +0200 WARN SetupAdminHandler - Cannot find entity='
'
09-22-2012 11:42:32.882 +0200 WARN SetupAdminHandler - Cannot find field='name' in url='/admin/passwords/_new/' setting value to empty string
09-22-2012 11:42:38.997 +0200 INFO ExecProcessor - Ran script: python /usr/local/splunk/etc/apps/twitter/bin/splunk_twitter_streamer.py, took 265.4 milliseconds to run, 0
bytes read, exited with code 1
09-22-2012 11:42:38.998 +0200 ERROR ExecProcessor - message from "python /usr/local/splunk/etc/apps/twitter/bin/splunk_twitter_streamer.py" Could not get Twitter credential
s from splunk. Error: No credentials supplied, please complete the Twitter app setup

0 Karma

nawneel
Communicator

please someone do something about it..i am also facing the same error!!

0 Karma

th0i3
New Member

did you get this working in the end?

0 Karma

Blu3fish
Path Finder

Editing $SPLUNK_HOME/etc/apps/twitter/bin/verify_password.py and plugging in my credentials:
username = ''
password = ''
also has no effect.
Running $SPLUNK_HOME/bin/python $SPLUNK_HOME/etc/apps/twitter/bin/verify_password.py returns "--status=success" though nothing is being splunked. Curiouser and curiouser.
If anyone knows of another way of manually entering your creds let me know.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...

SplunkTrust Application Period is Officially OPEN!

It's that time, folks! The application/nomination period for the 2026-2027 SplunkTrust is officially open. If ...