Hi Everyone,
We've just installed the Rapid7 Application, after restarting Splunk and attempting to configure the application it's failing with the following error in XML INTERNAL SERVER ERROR
I know the credentials are correct as I've configured the application in another instance of splunk.
Some of the logs below
splunkd_access.log
2014-12-10 14:29:31,897 INFO nexpose_setup:34 - Executing nexpose_setup.py
2014-12-10 14:29:31,948 INFO nexpose_setup:80 - Sucessfully retrieved stored config.
2014-12-10 14:29:31,948 INFO nexpose_setup:91 - No config data for field 'enableCIM' passed to setup script!
2014-12-10 14:29:31,948 INFO nexpose_setup:101 - No config data for field 'enableNexpose' passed to setup script!
2014-12-10 14:29:31,949 INFO nexpose_setup:109 - No config data for field 'port' passed to setup script!
2014-12-10 14:29:31,949 INFO nexpose_setup:117 - No config data for field 'hostname' passed to setup script!
2014-12-10 14:29:31,960 INFO nexpose_setup:147 - Deleting exisitng credential
splunkd.log
12-10-2014 14:27:38.964 +1030 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 70, in init\n hand.execute(info)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 528, in execute\n if self.requestedAction == ACTION_EDIT: self.handleEdit(confInfo)\n File "/opt2/splunk/etc/apps/rapid7/bin/nexpose_setup.py", line 148, in handleEdit\n entity.deleteEntity('/storage/passwords/', c.name, namespace=APPNAME, owner='nobody', sessionKey=sessionKey)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/entity.py", line 438, in deleteEntity\n serverResponse, serverContent = rest.simpleRequest(uri, sessionKey=sessionKey, method='DELETE', raiseAllErrors=True)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/rest/init.py", line 564, in simpleRequest\n raise splunk.BadRequest, (None, serverResponse.messages)\nBadRequest: [HTTP 400] Bad Request; [{'code': None, 'type': 'ERROR', 'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app."}]\n
12-10-2014 14:27:38.964 +1030 ERROR AdminManagerExternal - Unexpected error "" from python handler: "[HTTP 400] Bad Request; [{'code': None, 'type': 'ERROR', 'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app."}]". See splunkd.log for more details.
12-10-2014 14:27:39.039 +1030 ERROR HttpListener - Exception while processing request from 10.30.2.165 for /dj/en-us/rapid7/configuration/: Connection closed by peer
12-10-2014 14:27:39.040 +1030 ERROR HttpListener - Handler for /dj/en-us/rapid7/configuration/ sent a 0 byte response after earlier claiming a Content-Length of 139!
12-10-2014 14:27:40.962 +1030 ERROR AdminManager - Object id=credential:pxgrid:keystore: cannot be deleted in config=app.
12-10-2014 14:27:40.983 +1030 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 70, in init\n hand.execute(info)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 528, in execute\n if self.requestedAction == ACTION_EDIT: self.handleEdit(confInfo)\n File "/opt2/splunk/etc/apps/rapid7/bin/nexpose_setup.py", line 148, in handleEdit\n entity.deleteEntity('/storage/passwords/', c.name, namespace=APPNAME, owner='nobody', sessionKey=sessionKey)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/entity.py", line 438, in deleteEntity\n serverResponse, serverContent = rest.simpleRequest(uri, sessionKey=sessionKey, method='DELETE', raiseAllErrors=True)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/rest/init.py", line 564, in simpleRequest\n raise splunk.BadRequest, (None, serverResponse.messages)\nBadRequest: [HTTP 400] Bad Request; [{'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app.", 'code': None, 'type': 'ERROR'}]\n
12-10-2014 14:27:40.983 +1030 ERROR AdminManagerExternal - Unexpected error "" from python handler: "[HTTP 400] Bad Request; [{'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app.", 'code': None, 'type': 'ERROR'}]". See splunkd.log for more details.
12-10-2014 14:27:41.167 +1030 ERROR HttpListener - Exception while processing request from 10.30.2.165 for /dj/en-us/rapid7/configuration/: Connection closed by peer
12-10-2014 14:27:41.168 +1030 ERROR HttpListener - Handler for /dj/en-us/rapid7/configuration/ sent a 0 byte response after earlier claiming a Content-Length of 139!
12-10-2014 14:27:42.064 +1030 ERROR AdminManager - Object id=credential:pxgrid:keystore: cannot be deleted in config=app.
12-10-2014 14:27:42.084 +1030 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 70, in init\n hand.execute(info)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/admin.py", line 528, in execute\n if self.requestedAction == ACTION_EDIT: self.handleEdit(confInfo)\n File "/opt2/splunk/etc/apps/rapid7/bin/nexpose_setup.py", line 148, in handleEdit\n entity.deleteEntity('/storage/passwords/', c.name, namespace=APPNAME, owner='nobody', sessionKey=sessionKey)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/entity.py", line 438, in deleteEntity\n serverResponse, serverContent = rest.simpleRequest(uri, sessionKey=sessionKey, method='DELETE', raiseAllErrors=True)\n File "/opt2/splunk/lib/python2.7/site-packages/splunk/rest/init.py", line 564, in simpleRequest\n raise splunk.BadRequest, (None, serverResponse.messages)\nBadRequest: [HTTP 400] Bad Request; [{'type': 'ERROR', 'code': None, 'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app."}]\n
12-10-2014 14:27:42.084 +1030 ERROR AdminManagerExternal - Unexpected error "" from python handler: "[HTTP 400] Bad Request; [{'type': 'ERROR', 'code': None, 'text': "\n In handler 'passwords': Object id=credential:pxgrid:keystore: cannot be deleted in config=app."}]". See splunkd.log for more details.
Any ideas ?
... View more