Here are the lines from splunkversioncontrol_rest_restore.log 020-08-20 13:48:03,821 root INFO Received remote request checking username and role related to the token on url=https:///services/authentication/current-context?output_mode=json 2020-08-20 13:48:03,830 root INFO username= roles=['admin'] 2020-08-20 13:48:03,860 root INFO Sleeping for 30 seconds to wait for audit logs 2020-08-20 13:48:33,890 root INFO Sleep completed 2020-08-20 13:48:35,683 root INFO i="splunkVCRestore" Splunk Version Control Restore run with arguments="{'debugMode': 'true', 'destURL': 'https://58:8089', 'destUsername': 'splunkvcgituser', 'disabled': False, 'eai:acl': None, 'gitRepoURL': 'git@gitlab.com-pt9splunk:ciorg/sharedteams/ptn/pt9splunk.git', 'gitTempDir': '/opt/pt9splunk/vcrestore', 'host': 'GMC0449', 'host_resolved': 'xxxx', 'index': 'main', 'interval': '', 'python.version': None, 'name': 'splunkversioncontrol_restore://splunkVCRestore'}" 2020-08-20 13:48:35,687 root DEBUG Begin OS process run of cd /opt/xxxx/vcrestore; git checkout master; git pull 2020-08-20 13:48:37,124 root DEBUG OS process exited with zero code, for command cd /opt/xxxx/vcrestore; git checkout master; git pull 2020-08-20 13:48:37,125 root INFO i="splunkVCRestore" Successfully ran the git pull for URL=xxxx/sharedteams/xxx/xxxx.git from directory dir=/opt/xxxx/vcrestore 2020-08-20 13:48:37,125 root DEBUG i="splunkVCRestore" The restore list is [{'app': 'search', 'type': 'savedsearch', 'name': 'dds_git_test', 'tag': '2020-08-20_1345', 'scope': 'all', 'time': 1597952793, 'restoreAsUser': '', 'user': 'xxxx'}] 2020-08-20 13:48:37,125 root DEBUG i="splunkVCRestore" Running requests.post() on url=https://xxxx.58:8089/servicesNS/-/SplunkVersionControl/search/jobs with user=xxxx query="| savedsearch "SplunkVersionControl CheckAdmin" ldapFilter="*xxxx", usernameFilter="xxxx"" proxies_length=0 2020-08-20 13:48:37,303 root INFO i="splunkVCRestore" user=dougs has requested the object with name=dds_git_test of type=savedsearch to be restored from tag=2020-08-20_1345 and scope=all, restoreAsUser=, this was requested at time=1597952793 in app context of app=search 2020-08-20 13:48:37,304 root DEBUG Begin OS process run of cd /opt/xxxx/vcrestore; git checkout 2020-08-20_1345 2020-08-20 13:48:37,315 root DEBUG OS process exited with zero code, for command cd /opt/pt9splunk/vcrestore; git checkout 2020-08-20_1345 2020-08-20 13:48:37,316 root INFO i="splunkVCRestore" Successfully ran the git checkout for URL=xxxx/sharedteams/ptn/xxxx.git from directory dir=/opt/xxxxx/vcrestore 2020-08-20 13:48:37,316 root DEBUG i="splunkVCRestore" Known app list is 2020-08-20 13:48:37,316 root INFO i="splunkVCRestore" user=xxxx, attempting to restore name=dds_git_test in app=search of type=savedsearches in scope=all, restoreAsUser=, adminLevel=False 2020-08-20 13:48:37,316 root DEBUG i="splunkVCRestore" Running requests.get() on url=https://xxxx.58:8089/servicesNS/-/search/saved/searches/dds_git_test?output_mode=json with user=xxxx in app=search proxies_length=0 2020-08-20 13:48:37,378 root DEBUG i="splunkVCRestore" URL=https://xxxx.58:8089/servicesNS/-/search/saved/searches/dds_git_test?output_mode=json is throwing a 404, assuming new object creation 2020-08-20 13:48:37,378 root DEBUG i="splunkVCRestore" user=xxxx, name=dds_git_test, found typeFile=/opt/xxxx/vcrestore/search/user/savedsearches to restore from 2020-08-20 13:48:37,399 root INFO i="splunkVCRestore" user=xxxx, name=dds_git_test not found at scope=user in file=/opt/xxxx/vcrestore/search/user/savedsearches 2020-08-20 13:48:37,400 root DEBUG i="splunkVCRestore" user=xxxx, name=dds_git_test, found typeFile=/opt/xxxx/vcrestore/search/app/savedsearches to restore from 2020-08-20 13:48:37,407 root INFO i="splunkVCRestore" user=xxxx, name=dds_git_test not found at app level scope in typeFile=/opt/xxxx/vcrestore/search/app/savedsearches 2020-08-20 13:48:37,407 root DEBUG i="splunkVCRestore" user=xxxx, name=dds_git_test, found typeFile=/opt/xxxx/vcrestore/search/global/savedsearches to restore from 2020-08-20 13:48:37,409 root INFO i="splunkVCRestore" user=xxxx, name=dds_git_test not found at scope=global in typeFile=/opt/xxxx/vcrestore/search/global/savedsearches 2020-08-20 13:48:37,409 root WARNING i="splunkVCRestore" user=xxxx attempted to restore name=dds_git_test, type=savedsearches, restoreAsUser=, adminLevel=False however the object was not found, the restore was unsuccessful. Perhaps check the restore date, scope & capitilisation before trying again? 2020-08-20 13:48:37,409 root INFO i="splunkVCRestore" Done 2020-08-20 13:48:37,409 root WARNING Restore has failed to complete successfully in app=search, object of type=savedsearch, with name=dds_git_test was not restored from tag=2020-08-20_1345, scope=all with restoreAsUser= and requested by username=xxxx The restore is being requested from a member of the SHC and is the server that is throwing the 404 error. The application and the git repo are on the deployment server. The SplunkVCRestore input is pointing to .58 which is one of the SHC members. I thought that maybe it was because I wasn't trying to do the restore from .58 so I logged into that server but it still fails on the restore.
... View more