Splunk Dev

500 Internet Server Error when Update Apps/Add-Ons

ejwade
Contributor

When I attempt to update my existing Apps/Add-Ons through my Search Head's GUI, I get a 500 Internet Server Error. When I tail the logs for the search head, I get this interesting python log:

2018-01-12 17:11:47,107 ERROR [HTTP 404] Resource not found
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/rest/init.py", line 187, in dispatch
methodOutput = method()
File "/opt/splunk/etc/system/bin/appsmanager.py", line 218, in handle_GET
tree = etree.ElementTree(self._get_feed_root(url, extra_get_args=get_args))
File "/opt/splunk/etc/system/bin/appsmanager.py", line 395, in _get_feed_root
raise splunk.RESTException(404, "Resource not found")
RESTException: [HTTP 404] Resource not found

Has anyone seen this before? Is this is bug, or configuration error? This particular search head is accessing the Internet through a Squid web proxy, and all access is currently working (except this).

Thank you.
Ed

0 Karma

mayurr98
Super Champion

hey
Try configuring below in /opt/splunk/etc/system/local/web.conf. From web.conf.spec: make it 300

splunkdConnectionTimeout = <integer>
     * Number of seconds to wait before timing out when communicating with splunkd
     * Must be at least 30
     * Values smaller than 30 will be ignored, resulting in the use of the default value
     * Defaults to 30

Let me know if this helps!

0 Karma

ejwade
Contributor

Didn't work unfortunately. Thanks for your input though, mayurr98! Any one else have any ideas?

0 Karma

lakshman239
Influencer

do you have http_proxy and https_proxy settings in your env variable pointing to your squid server? Also, do you have no_proxy setting in the env variable? if so, you need to adjust that to include local host

0 Karma

ejwade
Contributor

I do not, but I have [proxyConfig] set in a server.conf file, and it works for connecting to the license server.

0 Karma

treven
Explorer

This is very old, but did anyone ever figure this out? We've had a ticket open for a month now about this exact issue and have chased down every error message and possible conf change. If anyone out there has a possible solution or suggestion for this that would be awesome! 

 

Thanks everyone!!

0 Karma
Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...