Splunk Cloud Platform

Socket error while from 127.0.0.1 while installing Splunk HTTP Event Collector logging interface for JavaScript

msilva
Path Finder

Hi,

For our AWS lambda services, we will need to send events to a Splunk Cloud instance. While installing Splunk HTTP Event Collector logging interface for JavaScript (https://github.com/splunk/splunk-javascript-logging), we got this error: 

npm install --save splunk-logging
15:30 $ cat /home/moacir/.npm/_logs/2022-07-21T13_24_33_020Z-debug-0.log
0 verbose cli [
0 verbose cli '/home/moacir/.nvm/versions/node/v16.15.0/bin/node',
0 verbose cli '/home/moacir/.nvm/versions/node/v16.15.0/bin/npm',
0 verbose cli 'install'
0 verbose cli ]
1 info using npm@8.5.5
2 info using node@v16.15.0
3 timing npm:load:whichnode Completed in 0ms
4 timing config:load:defaults Completed in 2ms
5 timing config:load:file:/home/moacir/.nvm/versions/node/v16.15.0/lib/node_modules/npm/npmrc Completed in 1ms
6 timing config:load:builtin Completed in 1ms
7 timing config:load:cli Completed in 2ms
8 timing config:load:env Completed in 0ms
9 timing config:load:file:/home/moacir/workspace/vmx-pma-arc-npm-modules/packages/arc-lambdas/sns-listeners/SIEMPublishers/.npmrc Completed in 0ms
10 timing config:load:project Completed in 10ms
11 timing config:load:file:/home/moacir/.npmrc Completed in 1ms
12 timing config:load:user Completed in 1ms
13 timing config:load:file:/home/moacir/.nvm/versions/node/v16.15.0/etc/npmrc Completed in 0ms
14 timing config:load:global Completed in 0ms
15 timing config:load:validate Completed in 2ms
16 timing config:load:credentials Completed in 1ms
17 timing config:load:setEnvs Completed in 2ms
18 timing config:load Completed in 23ms
19 timing npm:load:configload Completed in 23ms
20 timing npm:load:setTitle Completed in 1ms
21 timing config:load:flatten Completed in 4ms
22 timing npm:load:display Completed in 5ms
23 verbose logfile /home/moacir/.npm/_logs/2022-07-21T13_24_33_020Z-debug-0.log
24 timing npm:load:logFile Completed in 8ms
25 timing npm:load:timers Completed in 0ms
26 timing npm:load:configScope Completed in 0ms
27 timing npm:load Completed in 37ms
28 timing arborist:ctor Completed in 1ms
29 silly logfile start cleaning logs, removing 1 files
30 timing idealTree:init Completed in 89ms
31 timing idealTree:userRequests Completed in 0ms
32 silly idealTree buildDeps
33 silly fetch manifest needle@^2.6.0
34 verbose shrinkwrap failed to load node_modules/.package-lock.json out of date, updated: node_modules
35 silly fetch manifest jsdoc@^3.6.7
36 silly fetch manifest jshint@^2.12.0
37 silly fetch manifest mocha@^8.4.0
38 silly fetch manifest nyc@^15.1.0
39 silly placeDep ROOT jsdoc@ OK for: @verimatrix/arc-lambdas-siem-publishers-sns-listener@16.0.0 want: ^3.6.7
40 silly placeDep ROOT jshint@ OK for: @verimatrix/arc-lambdas-siem-publishers-sns-listener@16.0.0 want: ^2.12.0
41 silly placeDep ROOT mocha@ OK for: @verimatrix/arc-lambdas-siem-publishers-sns-listener@16.0.0 want: ^8.4.0
42 silly placeDep ROOT needle@ OK for: @verimatrix/arc-lambdas-siem-publishers-sns-listener@16.0.0 want: ^2.6.0
43 silly placeDep ROOT nyc@ OK for: @verimatrix/arc-lambdas-siem-publishers-sns-listener@16.0.0 want: ^15.1.0
44 timing idealTree:#root Completed in 350414ms
45 timing idealTree:node_modules/jsdoc Completed in 0ms
46 timing idealTree:node_modules/jshint Completed in 0ms
47 timing idealTree:node_modules/mocha Completed in 0ms
48 timing idealTree:node_modules/needle Completed in 0ms
49 timing idealTree:node_modules/nyc Completed in 0ms
50 timing idealTree:buildDeps Completed in 350417ms
51 timing idealTree:fixDepFlags Completed in 6ms
52 timing idealTree Completed in 350515ms
53 timing command:install Completed in 350522ms
54 verbose type system
55 verbose stack FetchError: request to http://localhost:4873/jsdoc failed, reason: connect ECONNREFUSED 127.0.0.1:4873
55 verbose stack at ClientRequest.<anonymous> (/home/moacir/.nvm/versions/node/v16.15.0/lib/node_modules/npm/node_modules/minipass-fetch/lib/index.js:130:14)
55 verbose stack at ClientRequest.emit (node:events:527:28)
55 verbose stack at Socket.socketErrorListener (node:_http_client:454:9)
55 verbose stack at Socket.emit (node:events:539:35)
55 verbose stack at emitErrorNT (node:internal/streams/destroy:157:8)
55 verbose stack at emitErrorCloseNT (node:internal/streams/destroy:122:3)
55 verbose stack at processTicksAndRejections (node:internal/process/task_queues:83:21)
56 verbose cwd /home/moacir/workspace/vmx-pma-arc-npm-modules/packages/arc-lambdas/sns-listeners/SIEMPublishers
57 verbose Linux 5.8.0-53-generic
58 verbose argv "/home/moacir/.nvm/versions/node/v16.15.0/bin/node" "/home/moacir/.nvm/versions/node/v16.15.0/bin/npm" "install"
59 verbose node v16.15.0
60 verbose npm v8.5.5
61 error code ECONNREFUSED
62 error syscall connect
63 error errno ECONNREFUSED
64 error FetchError: request to http://localhost:4873/jsdoc failed, reason: connect ECONNREFUSED 127.0.0.1:4873
64 error at ClientRequest.<anonymous> (/home/moacir/.nvm/versions/node/v16.15.0/lib/node_modules/npm/node_modules/minipass-fetch/lib/index.js:130:14)
64 error at ClientRequest.emit (node:events:527:28)
64 error at Socket.socketErrorListener (node:_http_client:454:9)
64 error at Socket.emit (node:events:539:35)
64 error at emitErrorNT (node:internal/streams/destroy:157:8)
64 error at emitErrorCloseNT (node:internal/streams/destroy:122:3)
64 error at processTicksAndRejections (node:internal/process/task_queues:83:21) {
64 error code: 'ECONNREFUSED',
64 error errno: 'ECONNREFUSED',
64 error syscall: 'connect',
64 error address: '127.0.0.1',
64 error port: 4873,
64 error type: 'system',
64 error requiredBy: '.'
64 error }
65 error
65 error If you are behind a proxy, please make sure that the
65 error 'proxy' config is set properly. See: 'npm help config'
66 verbose exit 1
67 timing npm Completed in 350839ms
68 verbose unfinished npm timer reify 1658409873316
69 verbose unfinished npm timer reify:loadTrees 1658409873320
70 verbose code 1
71 error A complete log of this run can be found in:
71 error /home/moacir/.npm/_logs/2022-07-21T13_24_33_020Z-debug-0.log

I assume Splunk Cloud is supported?

Requirements

  • Node.js v4 or later. Splunk logging for Javascript is tested with Node.js v10.0 and v14.0.
  • Splunk Enterprise 6.3.0 or later, or Splunk Cloud. Splunk logging for Javascript is tested with Splunk Enterprise 8.0 and 8.2.0.
  • An HTTP Event Collector token from your Splunk Enterprise server.

Could you please investigate this issue? Why is there a connection to 127.0.0.1:4873?

Kind regards,

 

Moacir

0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...