Security

Why am I receiving a '('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))' error?

gcarywhite
Explorer

Splunk is installed on a VM running CentOS release 6.6 .

I am using the Splunkweb Data Loader to upload files from my desktop.

I receive the following error for any file type (except zips) when using the Splunkweb Data Loader

'Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden'

Non-zip files show progress bar until 100% is reached and then display the error message above.

Zip files show a progress bar in a popup window and stay stuck at the 100% mark. The error message is never displayed for this file type.

However, SplunkWeb never moves to the Set Sourcetype option for any filetype.

i have no problems performing Searches or using other features of Splunk .

I set the HTTP_PROXY and HTTP_PROXY in splunk-launch.conf but this did not help.

I am new to Splunk and need to get it working for a proof-of-concept. Any help with this issue is greatly appreciated.

Labels (1)
Tags (3)

dgrubb_splunk
Splunk Employee
Splunk Employee

What happens if you try and set this in splunk-launch.conf

no_proxy=127.0.0.1,localhost

dm1
Contributor

This helped me fix my issue! Thanks!

0 Karma

cygnetix
Path Finder

That did the trick for me. I expect this is a bug though, I can't see why these proxy settings should influence the behavior of the "Add data" screen.

0 Karma

nanai
New Member

The solution mentioned here worked for me too.
Same problem occurred on my local (windows )machine while doing a tutorial. Version 7.x of splunk is running on my machine.

0 Karma

kishor_pinjark2
Path Finder

Worked for me also.

0 Karma

soul911
New Member

After modify the .conf and restart splunk, It works.

0 Karma

tnemil
New Member

i get further, but at Submit file step for indexing, it silently fails but see a message in splunkd.log

WARN HttpListener - Read Timeout communicating with , disconnecting

trying to see if another place need to tell splunk to use localhost NOT actual IP

0 Karma

dgrubb_splunk
Splunk Employee
Splunk Employee

because the apps are making calls to the management port of the local system.

0 Karma

mpo
New Member

Problem still exists with Splunk 6.3...
Removing the proxy from the config (splunk-launch.conf) fixes it as workaround.

But I'm just wondering, why Splunk is calling home, when I upload a new log...

0 Karma

madsurfer
Explorer

Facing the same issue this morning. Anybody?

0 Karma

gcarywhite
Explorer

Issue appeared to be related to the installation.

I had installed Splunk on this server using the rpm package
I uninstalled the package and removed the /opt/splunk folder

Recreated the folder and installed Splunk this time using tar file install

Data upload issues did not return. All seems well so far

0 Karma

donfranke12
New Member

I'm still having this issue. Reinstalling Splunk 6.2.2 did not solve the problem for me.

0 Karma

gcarywhite
Explorer

Adding more information from the web_service.log

015-02-03 11:58:30,066 INFO [54d0fe35fa7f43485b7e50] view:1084 - PERF - viewType=fastpath viewTime=0.0808s templateTime=0.0016s
2015-02-03 12:04:56,164 ERROR [54d0ffb8227f43700936d0] proxy:194 - ('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/proxy.py", line 157, in index
return self.uploadFile(args, sessionKey, uri)
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/proxy.py", line 261, in uploadFile
verify=False #allow self signed certificates
File "/opt/splunk/lib/python2.7/site-packages/requests/api.py", line 88, in post
return request('post', url, data=data, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/api.py", line 44, in request
return session.request(method=method, url=url, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/sessions.py", line 456, in request
resp = self.send(prep, **send_kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/sessions.py", line 559, in send
r = adapter.send(request, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/adapters.py", line 378, in send
raise ProxyError(e)
ProxyError: ('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) v3.54.0

The Splunk Threat Research Team (STRT) recently released Enterprise Security Content Update (ESCU) v3.54.0 and ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...