Splunk is installed on a VM running CentOS release 6.6 .
I am using the Splunkweb Data Loader to upload files from my desktop.
I receive the following error for any file type (except zips) when using the Splunkweb Data Loader
'Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden'
Non-zip files show progress bar until 100% is reached and then display the error message above.
Zip files show a progress bar in a popup window and stay stuck at the 100% mark. The error message is never displayed for this file type.
However, SplunkWeb never moves to the Set Sourcetype option for any filetype.
i have no problems performing Searches or using other features of Splunk .
I set the HTTP_PROXY and HTTP_PROXY in splunk-launch.conf but this did not help.
I am new to Splunk and need to get it working for a proof-of-concept. Any help with this issue is greatly appreciated.
What happens if you try and set this in splunk-launch.conf
no_proxy=127.0.0.1,localhost
This helped me fix my issue! Thanks!
That did the trick for me. I expect this is a bug though, I can't see why these proxy settings should influence the behavior of the "Add data" screen.
The solution mentioned here worked for me too.
Same problem occurred on my local (windows )machine while doing a tutorial. Version 7.x of splunk is running on my machine.
Worked for me also.
After modify the .conf and restart splunk, It works.
i get further, but at Submit file step for indexing, it silently fails but see a message in splunkd.log
WARN HttpListener - Read Timeout communicating with , disconnecting
trying to see if another place need to tell splunk to use localhost NOT actual IP
because the apps are making calls to the management port of the local system.
Problem still exists with Splunk 6.3...
Removing the proxy from the config (splunk-launch.conf) fixes it as workaround.
But I'm just wondering, why Splunk is calling home, when I upload a new log...
Facing the same issue this morning. Anybody?
Issue appeared to be related to the installation.
I had installed Splunk on this server using the rpm package
I uninstalled the package and removed the /opt/splunk folder
Recreated the folder and installed Splunk this time using tar file install
Data upload issues did not return. All seems well so far
I'm still having this issue. Reinstalling Splunk 6.2.2 did not solve the problem for me.
Adding more information from the web_service.log
015-02-03 11:58:30,066 INFO [54d0fe35fa7f43485b7e50] view:1084 - PERF - viewType=fastpath viewTime=0.0808s templateTime=0.0016s
2015-02-03 12:04:56,164 ERROR [54d0ffb8227f43700936d0] proxy:194 - ('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/proxy.py", line 157, in index
return self.uploadFile(args, sessionKey, uri)
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/proxy.py", line 261, in uploadFile
verify=False #allow self signed certificates
File "/opt/splunk/lib/python2.7/site-packages/requests/api.py", line 88, in post
return request('post', url, data=data, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/api.py", line 44, in request
return session.request(method=method, url=url, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/sessions.py", line 456, in request
resp = self.send(prep, **send_kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/sessions.py", line 559, in send
r = adapter.send(request, **kwargs)
File "/opt/splunk/lib/python2.7/site-packages/requests/adapters.py", line 378, in send
raise ProxyError(e)
ProxyError: ('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))