Splunk Dev

500 Internet Server Error when Update Apps/Add-Ons

ejwade
Contributor

When I attempt to update my existing Apps/Add-Ons through my Search Head's GUI, I get a 500 Internet Server Error. When I tail the logs for the search head, I get this interesting python log:

2018-01-12 17:11:47,107 ERROR [HTTP 404] Resource not found
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/rest/init.py", line 187, in dispatch
methodOutput = method()
File "/opt/splunk/etc/system/bin/appsmanager.py", line 218, in handle_GET
tree = etree.ElementTree(self._get_feed_root(url, extra_get_args=get_args))
File "/opt/splunk/etc/system/bin/appsmanager.py", line 395, in _get_feed_root
raise splunk.RESTException(404, "Resource not found")
RESTException: [HTTP 404] Resource not found

Has anyone seen this before? Is this is bug, or configuration error? This particular search head is accessing the Internet through a Squid web proxy, and all access is currently working (except this).

Thank you.
Ed

0 Karma

mayurr98
Super Champion

hey
Try configuring below in /opt/splunk/etc/system/local/web.conf. From web.conf.spec: make it 300

splunkdConnectionTimeout = <integer>
     * Number of seconds to wait before timing out when communicating with splunkd
     * Must be at least 30
     * Values smaller than 30 will be ignored, resulting in the use of the default value
     * Defaults to 30

Let me know if this helps!

0 Karma

ejwade
Contributor

Didn't work unfortunately. Thanks for your input though, mayurr98! Any one else have any ideas?

0 Karma

lakshman239
Influencer

do you have http_proxy and https_proxy settings in your env variable pointing to your squid server? Also, do you have no_proxy setting in the env variable? if so, you need to adjust that to include local host

0 Karma

ejwade
Contributor

I do not, but I have [proxyConfig] set in a server.conf file, and it works for connecting to the license server.

0 Karma

treven
Explorer

This is very old, but did anyone ever figure this out? We've had a ticket open for a month now about this exact issue and have chased down every error message and possible conf change. If anyone out there has a possible solution or suggestion for this that would be awesome! 

 

Thanks everyone!!

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...