Splunk Dev

500 Internet Server Error when Update Apps/Add-Ons

ejwade
Contributor

When I attempt to update my existing Apps/Add-Ons through my Search Head's GUI, I get a 500 Internet Server Error. When I tail the logs for the search head, I get this interesting python log:

2018-01-12 17:11:47,107 ERROR [HTTP 404] Resource not found
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/rest/init.py", line 187, in dispatch
methodOutput = method()
File "/opt/splunk/etc/system/bin/appsmanager.py", line 218, in handle_GET
tree = etree.ElementTree(self._get_feed_root(url, extra_get_args=get_args))
File "/opt/splunk/etc/system/bin/appsmanager.py", line 395, in _get_feed_root
raise splunk.RESTException(404, "Resource not found")
RESTException: [HTTP 404] Resource not found

Has anyone seen this before? Is this is bug, or configuration error? This particular search head is accessing the Internet through a Squid web proxy, and all access is currently working (except this).

Thank you.
Ed

0 Karma

mayurr98
Super Champion

hey
Try configuring below in /opt/splunk/etc/system/local/web.conf. From web.conf.spec: make it 300

splunkdConnectionTimeout = <integer>
     * Number of seconds to wait before timing out when communicating with splunkd
     * Must be at least 30
     * Values smaller than 30 will be ignored, resulting in the use of the default value
     * Defaults to 30

Let me know if this helps!

0 Karma

ejwade
Contributor

Didn't work unfortunately. Thanks for your input though, mayurr98! Any one else have any ideas?

0 Karma

lakshman239
Influencer

do you have http_proxy and https_proxy settings in your env variable pointing to your squid server? Also, do you have no_proxy setting in the env variable? if so, you need to adjust that to include local host

0 Karma

ejwade
Contributor

I do not, but I have [proxyConfig] set in a server.conf file, and it works for connecting to the license server.

0 Karma

treven
Explorer

This is very old, but did anyone ever figure this out? We've had a ticket open for a month now about this exact issue and have chased down every error message and possible conf change. If anyone out there has a possible solution or suggestion for this that would be awesome! 

 

Thanks everyone!!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Build the Future of Agentic AI: Join the Splunk Agentic Ops Hackathon

AI is changing how teams investigate incidents, detect threats, automate workflows, and build intelligent ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...