Getting Data In

Why do I receive an error message when trying to change a setting in Data Inputs?

hadiyan
Explorer

I use free license Splunk Enterprise, why there was error message when i try to change setting in data input?
error message is "requestid=587050643ecae7993ac8"

0 Karma
1 Solution

niketn
Legend

When you get this error, can you check splunkd if there is any details of the error. You can also set log_level=ERROR to see only errors for this time frame.

index=_internal sourcetype=splunkd earliest=-5m latest=now log_level=* 

Would it be possible for you to backup config/data and reinstall if you are using free license only for POCs?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

niketn
Legend

When you get this error, can you check splunkd if there is any details of the error. You can also set log_level=ERROR to see only errors for this time frame.

index=_internal sourcetype=splunkd earliest=-5m latest=now log_level=* 

Would it be possible for you to backup config/data and reinstall if you are using free license only for POCs?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

hadiyan
Explorer

I've done this step " index=_internal sourcetype=splunkd earliest=-5m latest=now log_level=*"
But i cant understand the output. Sorry i'm newbie on splunk

I've back up too, I will try to reinstall it,
Im student, and this is for my final project

0 Karma

niketn
Legend

Could you please let me know how the issue was resolved? Was it through re-install? or through splunkd log errors?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

hadiyan
Explorer

it was resolved by reinstall splunk, thank you for your help 🙂

0 Karma

niketn
Legend

Can you please Accept/Vote my answer then?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

niketn
Legend

You have accepted other comment where there was no answer.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

hadiyan
Explorer

done it, thank you..

0 Karma

niketn
Legend

If you think the suggestion has helped you to resolve your issue, then kindly accept the answer or vote.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

mattymo
Splunk Employee
Splunk Employee

Hi hadiyan!

Could you provide more detail about what you are trying to accomplish, what setting you tried to change and where that "error" message was seen?

- MattyMo
0 Karma

hadiyan
Explorer

I want to take data from Twitter API Tools, using REST..
So i go to setting> data input and sudenly error mesage appear like this
"500 Internal Server Error"
"More information about your request (requestid=587179a692cae7bb0e48) in search

Sorry my english isn't good enough

0 Karma

ppuru
Path Finder

Is it a 500 internal server error? Do you get this message when you access Settings->Data Input page?

hadiyan
Explorer

Yes!
I want to take data from Twitter API Tools, using REST..
So i go to setting> data input and sudenly error mesage appear like this
"500 Internal Server Error"
"More information about your request (requestid=587179a692cae7bb0e48) in search

what should i do??
Sorry my english isn't good enough

0 Karma
Get Updates on the Splunk Community!

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...