Security

Splunk for Twitter authentication error

Blu3fish
Path Finder

Downloaded the Twitter app over the weekend on a splunkbeta instance I have running and all went well but when I tried installing the app on my 4.1.5 and 4.1.6 instances I ran into a configuration error where it is no longer allowing me to enter my splunk credentials.

alt text

As expected splunkd.log has a lot of the following messages:

ERROR ExecProcessor - message from "python /Applications/splunk/etc/apps/twitter/bin/splunk_twitter_streamer.py" Could not get Twitter credentials from splunk. Error: [HTTP 500] Splunkd internal error; [{'text': "In handler 'passwords': Admin handler 'passwords' not found.", 'code': None, 'type': 'ERROR'}]

Anyone else experiencing this? Anyone know of a workaround? Any help is appreciated.

Tags (2)

amiracle
Splunk Employee
Splunk Employee

I figured out a way to get the twitter app to work with the Splunk Modular REST API. Here is a link to the fix.

http://splunk-base.splunk.com/answers/58689/issue-with-twitter-app-installation?page=1&focusedAnswer...

0 Karma

marcoscala
Builder

Those are the errors I got instead: (Splunk 4.3.4 running on Mac OSX 10.7.4):

09-22-2012 11:42:06.218 +0200 WARN SetupAdminHandler - Cannot find entity=''
09-22-2012 11:42:06.218 +0200 WARN SetupAdminHandler - Cannot find field='name' in url='/admin/passwords/_new/' setting value to empty string
09-22-2012 11:42:08.997 +0200 INFO ExecProcessor - Ran script: python /usr/local/splunk/etc/apps/twitter/bin/splunk_twitter_streamer.py, took 265.2 milliseconds to run, 0
bytes read, exited with code 1
09-22-2012 11:42:08.997 +0200 ERROR ExecProcessor - message from "python /usr/local/splunk/etc/apps/twitter/bin/splunk_twitter_streamer.py" Could not get Twitter credential
s from splunk. Error: No credentials supplied, please complete the Twitter app setup
09-22-2012 11:42:14.983 +0200 WARN SetupAdminHandler - Cannot find entity='
'
09-22-2012 11:42:14.983 +0200 WARN SetupAdminHandler - Cannot find field='name' in url='/admin/passwords/_new/' setting value to empty string
09-22-2012 11:42:15.014 +0200 WARN SetupAdminHandler - Cannot find entity=''
09-22-2012 11:42:15.015 +0200 WARN SetupAdminHandler - Cannot find field='name' in url='/admin/passwords/_new/' setting value to empty string
09-22-2012 11:42:15.094 +0200 INFO ExecProcessor - New scheduled exec process: python /usr/local/splunk/etc/apps/twitter/bin/splunk_twitter_streamer.py
09-22-2012 11:42:15.094 +0200 INFO ExecProcessor - interval: 30000 ms
09-22-2012 11:42:15.116 +0200 WARN SetupAdminHandler - Cannot find entity='
'
09-22-2012 11:42:15.116 +0200 WARN SetupAdminHandler - Cannot find field='name' in url='/admin/passwords/_new/' setting value to empty string
09-22-2012 11:42:32.850 +0200 WARN SetupAdminHandler - Cannot find entity=''
09-22-2012 11:42:32.851 +0200 WARN SetupAdminHandler - Cannot find field='name' in url='/admin/passwords/_new/' setting value to empty string
09-22-2012 11:42:32.882 +0200 WARN SetupAdminHandler - Cannot find entity='
'
09-22-2012 11:42:32.882 +0200 WARN SetupAdminHandler - Cannot find field='name' in url='/admin/passwords/_new/' setting value to empty string
09-22-2012 11:42:38.997 +0200 INFO ExecProcessor - Ran script: python /usr/local/splunk/etc/apps/twitter/bin/splunk_twitter_streamer.py, took 265.4 milliseconds to run, 0
bytes read, exited with code 1
09-22-2012 11:42:38.998 +0200 ERROR ExecProcessor - message from "python /usr/local/splunk/etc/apps/twitter/bin/splunk_twitter_streamer.py" Could not get Twitter credential
s from splunk. Error: No credentials supplied, please complete the Twitter app setup

0 Karma

nawneel
Communicator

please someone do something about it..i am also facing the same error!!

0 Karma

th0i3
New Member

did you get this working in the end?

0 Karma

Blu3fish
Path Finder

Editing $SPLUNK_HOME/etc/apps/twitter/bin/verify_password.py and plugging in my credentials:
username = ''
password = ''
also has no effect.
Running $SPLUNK_HOME/bin/python $SPLUNK_HOME/etc/apps/twitter/bin/verify_password.py returns "--status=success" though nothing is being splunked. Curiouser and curiouser.
If anyone knows of another way of manually entering your creds let me know.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Build the Future of Agentic AI: Join the Splunk Agentic Ops Hackathon

AI is changing how teams investigate incidents, detect threats, automate workflows, and build intelligent ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...