I don't think Splunk 7.x supports the import splunk.entity as entity in splunklib. I just modified getCredentials to hardcode endpoint, apiKey and auth and returned them from that function. Commented out the rest and it will start working. Not ideal but there is an issue with the entities = entity.getEntities call. Ideally you would rewrite that function to use splunklib.client and make a call to storage_passwords to populate those 3 fields but I didn't have time to figure that out yet. endpoint, apiKey, auth = getCredentials(sessionKey) ... View more

From what I can tell - The retry_url function in ./boto/utils.py file is used for accessing the metadata service on an EC2 instance. Basically if you have access to an EC2 instance.. and AWS SDK for python is installed.. you can run this function and point it at the url of 169.254.169.254. Since you probably aren't running the AWS app from an EC2 instance you are going to get the URLError. How i fixed it. from dir /opt/splunk/etc/apps/splunk_app_aws/bin/boto [splunk]$ cp utils.py utils.py.bak [splunk]$ vi utils.py add the following 2 lines to catch the exception except urllib.error.URLError as e: return '' This will go in the retry_url() function between the other 2 except statements.. except urllib.error.HTTPError as e: code = e.getcode() if code == 404 and not retry_on_404: return '' except urllib.error.URLError as e: return '' except Exception as e: boto.log.exception('Caught exception reading instance data') Hope this helps - I stopped getting the error messages. This isn't the best fix but I'm new to python and splunk. No restart or anything required. ... View more