Activity Feed
- Got Karma for Re: Splunk DB Connect: How to connect to Oracle DB?. 06-05-2020 12:48 AM
- Posted Collecting local load balance metrics using the iControl API dies works for a little while the dies with SSLError on All Apps and Add-ons. 04-24-2019 06:39 AM
- Tagged Collecting local load balance metrics using the iControl API dies works for a little while the dies with SSLError on All Apps and Add-ons. 04-24-2019 06:39 AM
- Posted Re: Error: read ECONNRESET on All Apps and Add-ons. 04-10-2019 08:33 AM
- Posted Re: Error: read ECONNRESET on All Apps and Add-ons. 04-10-2019 06:47 AM
- Posted Re: Splunk DB Connect: How to connect to Oracle DB? on All Apps and Add-ons. 08-08-2017 02:03 PM
- Posted Splunk Oracle TA collect Unified Auditing Logs on All Apps and Add-ons. 04-04-2017 12:48 PM
- Tagged Splunk Oracle TA collect Unified Auditing Logs on All Apps and Add-ons. 04-04-2017 12:48 PM
- Tagged Splunk Oracle TA collect Unified Auditing Logs on All Apps and Add-ons. 04-04-2017 12:48 PM
- Posted Splunk Add-on for Box: Is it possible to see the entire folder structure instead of just one level up? on All Apps and Add-ons. 03-30-2017 12:36 PM
- Tagged Splunk Add-on for Box: Is it possible to see the entire folder structure instead of just one level up? on All Apps and Add-ons. 03-30-2017 12:36 PM
- Tagged Splunk Add-on for Box: Is it possible to see the entire folder structure instead of just one level up? on All Apps and Add-ons. 03-30-2017 12:36 PM
- Tagged Splunk Add-on for Box: Is it possible to see the entire folder structure instead of just one level up? on All Apps and Add-ons. 03-30-2017 12:36 PM
- Posted How do you change how much to poll in a single query? on All Apps and Add-ons. 03-29-2017 06:39 AM
- Tagged How do you change how much to poll in a single query? on All Apps and Add-ons. 03-29-2017 06:39 AM
- Tagged How do you change how much to poll in a single query? on All Apps and Add-ons. 03-29-2017 06:39 AM
Topics I've Started
Subject | Karma | Author | Latest Post |
---|---|---|---|
0 | |||
0 | |||
0 | |||
0 |
04-24-2019
06:39 AM
Whenever we turn on the the API collection for local load balancer metrics, it will work for a few minutes to a couple of hours, but ultimately it will stop collecting the data. Every time it does this, we get the below error message:
2019-04-22 11:06:22,765 ERROR pid=33429 tid=Thread-46 file=f5_bigip_scheduler.py:run:177 | Error in F5BigIPWorker.run() - Traceback:
Traceback (most recent call last):
File "/app/splunk/etc/apps/Splunk_TA_f5-bigip/bin/Splunk_TA_f5_bigip/f5_bigip_scheduler.py", line 167, in run
items=query.fetch()
File "/app/splunk/etc/apps/Splunk_TA_f5-bigip/bin/Splunk_TA_f5_bigip/F5_iControl_Template.py", line 77, in fetch
return [event for partition in partitions for event in self.fetch(partition)]
File "/app/splunk/etc/apps/Splunk_TA_f5-bigip/bin/Splunk_TA_f5_bigip/F5_iControl_Template.py", line 136, in _fetch
dataAgainst=F5_iControl_API.run(bigip=bigip, api=aApiAgainst, params=dataWith)
File "/app/splunk/etc/apps/Splunk_TA_f5-bigip/bin/Splunk_TA_f5_bigip/F5_iControl_API.py", line 90, in run
return method(params) if params else method()
File "/app/splunk/etc/apps/Splunk_TA_f5-bigip/bin/Splunk_TA_f5_bigip/bigsuds.py", line 416, in wrapped_method
result = method(*args, **kwargs)
File "/app/splunk/etc/apps/Splunk_TA_f5-bigip/bin/Splunk_TA_f5_bigip/suds/client.py", line 542, in __call_
return client.invoke(args, kwargs)
File "/app/splunk/etc/apps/Splunk_TA_f5-bigip/bin/Splunk_TA_f5_bigip/suds/client.py", line 602, in invoke
result = self.send(soapenv)
File "/app/splunk/etc/apps/Splunk_TA_f5-bigip/bin/Splunk_TA_f5_bigip/suds/client.py", line 637, in send
reply = transport.send(request)
File "/app/splunk/etc/apps/Splunk_TA_f5-bigip/bin/Splunk_TA_f5_bigip/suds/transport/https.py", line 64, in send
return HttpTransport.send(self, request)
File "/app/splunk/etc/apps/Splunk_TA_f5-bigip/bin/Splunk_TA_f5_bigip/suds/transport/http.py", line 77, in send
fp = self.u2open(u2request)
File "/app/splunk/etc/apps/Splunk_TA_f5-bigip/bin/Splunk_TA_f5_bigip/suds/transport/http.py", line 118, in u2open
return url.open(u2request, timeout=tm)
File "/app/splunk/lib/python2.7/urllib2.py", line 429, in open
response = self._open(req, data)
File "/app/splunk/lib/python2.7/urllib2.py", line 447, in _open
'_open', req)
File "/app/splunk/lib/python2.7/urllib2.py", line 407, in _call_chain
result = func(*args)
File "/app/splunk/lib/python2.7/urllib2.py", line 1241, in https_open
context=self._context)
File "/app/splunk/lib/python2.7/urllib2.py", line 1201, in do_open
r = h.getresponse(buffering=True)
File "/app/splunk/lib/python2.7/httplib.py", line 1121, in getresponse
response.begin()
File "/app/splunk/lib/python2.7/httplib.py", line 438, in begin
version, status, reason = self._read_status()
File "/app/splunk/lib/python2.7/httplib.py", line 394, in _read_status
line = self.fp.readline(_MAXLINE + 1)
File "/app/splunk/lib/python2.7/socket.py", line 480, in readline
data = self._sock.recv(self._rbufsize)
File "/app/splunk/lib/python2.7/ssl.py", line 766, in recv
return self.read(buflen)
File "/app/splunk/lib/python2.7/ssl.py", line 653, in read
v = self._sslobj.read(len)
SSLError: ('The read operation timed out',)
We have a case opened with F5, but they are pretty much useless. Wondering if anyone else has had this issue and what they did to resolve this?
... View more
04-10-2019
08:33 AM
Awesome. Looking at our traffic, we've got the same issue. Thank you for your answer. This should solve our problems as well.
... View more
04-10-2019
06:47 AM
Did you find a solution to this? I'm receiving the same error on my instance.
... View more
08-08-2017
02:03 PM
1 Karma
I was having the same issue until I changed the query for the connection. Try this:
Under the connection, click on the checkbox for "Edit JDBC URL"
Use the format: jdbc:oracle:thin:<host>@:1521/<db>
For us, it wouldn't work unless you used the FQDN on both the host and the database. An example of this would be jdbc:oracle:thin:@server1.example.com:1521/database1.example.com.
Hope this helps.
... View more
04-04-2017
12:48 PM
I'm wondering what is the best way to collect events from the Oracle Unified Auditing db. It know without OUA it was easy to install the Splunk UF on the server then collect the .aud logs. Is the same functionality there with Unified Auditing, where the UF monitors the files or do we have to actually query the DB to get the logs?
... View more
03-30-2017
12:36 PM
We are trying to create a report of all the folders currently in box and all of the folder's collaborators. With the current edition, we can only see one level up, but we would like to see the entire folder path. I know its somewhat possible with the standard API, but wondering if we could get that functionality with the Splunk Add-on for Box?
... View more
03-29-2017
06:39 AM
I have made a copy of the nwsdk_query and put it in local and changed the max_meta to a much higher number, but it still only polls 25,000 events at a time. I then thought maybe it was reading the default file, so I changed that to a different number, but it still only polls at 25,000 events. We are currently operating at 35,000k EPS, so only polling 25k every 5 seconds isn't going to work. We've had this running now for 3 days, and it still hasn't even caught up to the 1st day we started on. Any help would be much appreciated.
... View more