Monitoring Splunk

An error occurred while rendering the page template. See web_service.log for more details

smolcj
Builder

Hi all,
"An error occurred while rendering the page template. See web_service.log for more details"
When i changed admin properties i got this error. i tried restarting service. but error persists. please help .
thank you
webservice log is like

Traceback (most recent call last):

File "Splunkhome\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\lib\config.py", line 79, in getServerZoneInfo
return times.getServerZoneinfo()
File "Splunkhome\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\lib\times.py", line 158, in getServerZoneinfo
serverStatus, serverResp = splunk.rest.simpleRequest('/search/timeparser/tz')
File "Splunkhome\Python-2.7\Lib\site-packages\splunk\rest_init.py", line 458, in simpleRequest
raise splunk.AuthorizationFailed(extendedMessages=uri)
AuthorizationFailed: [HTTP 403] Client is not authorized to perform requested action; https://127.0.0.1:8089/services/search/timeparser/tz
2012-11-15 10:53:23,819 WARNING [50a47c4bc25b85b70] ifx:186 - Problem determining if fieldname exists: [HTTP 403] Client is not authorized to perform requested action; https://127.0.0.1:8089/servicesNS/admin/ULTRAMESSAGING_FOLDER/properties/props?fillcontents=1
2012-11-15 10:54:04,509 ERROR [50a47c74465cb1f28] config:81 - [HTTP 403] Client is not authorized to perform requested action; https://127.0.0.1:8089/services/search/timeparser/tz
Traceback (most recent call last):
File "Splunkhome\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\lib\config.py", line 79, in getServerZoneInfo
return times.getServerZoneinfo()
File "Splunkhome\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\lib\times.py", line 158, in getServerZoneinfo
serverStatus, serverResp = splunk.rest.simpleRequest('/search/timeparser/tz')
File "Splunkhome\Python-2.7\Lib\site-packages\splunk\rest__init
.py", line 458, in simpleRequest
raise splunk.AuthorizationFailed(extendedMessages=uri)
AuthorizationFailed: [HTTP 403] Client is not authorized to perform requested action; https://127.0.0.1:8089/services/search/timeparser/tz
2012-11-15 10:54:53,681 ERROR [50a47ca59956d77b8] config:81 - [HTTP 403] Client is not authorized to perform requested action; https://127.0.0.1:8089/services/search/timeparser/tz
Traceback (most recent call last):
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\lib\config.py", line 79, in getServerZoneInfo
return times.getServerZoneinfo()
File "v\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\lib\times.py", line 158, in getServerZoneinfo
serverStatus, serverResp = splunk.rest.simpleRequest('/search/timeparser/tz')
File "Splunkhome\Python-2.7\Lib\site-packages\splunk\rest__init
.py", line 458, in simpleRequest
raise splunk.AuthorizationFailed(extendedMessages=uri)
AuthorizationFailed: [HTTP 403] Client is not authorized to perform requested action; https://127.0.0.1:8089/services/search/timeparser/tz
2012-11-15 10:58:31,335 ERROR [50a47d7f0e5c4ab38] config:81 - [HTTP 403] Client is not authorized to perform requested action; https://127.0.0.1:8089/services/search/timeparser/tz
Traceback (most recent call last):
File "Splunkhome\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\lib\config.py", line 79, in getServerZoneInfo
return times.getServerZoneinfo()
File "Splunkhome\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\lib\times.py", line 158, in getServerZoneinfo
serverStatus, serverResp = splunk.rest.simpleRequest('/search/timeparser/tz')
File "Splunkhome\Python-2.7\Lib\site-packages\splunk\rest__init
.py", line 458, in simpleRequest
raise splunk.AuthorizationFailed(extendedMessages=uri)
AuthorizationFailed: [HTTP 403] Client is not authorized to perform requested action; https://127.0.0.1:8089/services/search/timeparser/tz
2012-11-15 11:03:26,789 ERROR [50a47ea5c53a3d7f0] messages:114 - Splunkd daemon is not responding: ('[Errno 10061] No connection could be made because the target machine actively refused it',)
Traceback (most recent call last):
File "Splunkhome\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\controllers\messages.py", line 81, in index
entries = splunk.entity.getEntities(uri)
File "Splunkhome\Python-2.7\Lib\site-packages\splunk\entity.py", line 152, in getEntities
serverResponse, serverContent = rest.simpleRequest(uri, getargs=kwargs, sessionKey=sessionKey, raiseAllErrors=True)
File "Splunkhome\Python-2.7\Lib\site-packages\splunk\rest__init
_.py", line 418, in simpleRequest
raise splunk.SplunkdConnectionException, str(e)
SplunkdConnectionException: Splunkd daemon is not responding: ('[Errno 10061] No connection could be made because the target machine actively refused it',)
2012-11-15 11:03:36,769 INFO [50a469edd525863c8] root:134 - ENGINE: Bus STOPPING

Tags (1)

pavankumarboras
New Member

When i have created the new user And provoid the role for User that time below error will be occurred
*******"An error occurred while rendering the page template. See web_service.log for more details"*
Solution for that :-
first go the $SPLUNK_HOME/etc/system/local/authorize.conf and remove to latest created capabilities and save that file
then again create new role and assign the new capabilities according to the new created user for ex ( user, admin,power) and follow the given link to assign new capabilities

https://docs.splunk.com/Documentation/Splunk/8.0.1/Security/Rolesandcapabilities

0 Karma

jayashree123
Engager

Its working..
Thanks

0 Karma

mangiari
Explorer

Posting here since this is the first result on search engines. In my case I was adding a new user and probably I messed up something with the roles/capabilities.

What I was trying to achive is create an user with reduced capabilities, what i got is running Splunk instance (splunkd) but with admin user unable to view/change/modify anything or do any searches!

Restarting splunk did not help, neither trying to modify/deleting accounts with CLI, as far as I can tell. Looking for the log as OP did raise my attention on ServerZoneInfo, but i really couldn't understand its meaning.

What I did is modify the file in $SPLUNK_HOME/etc/system/default/authorize.conf and enabling capabilities for specified roles. Playing a little with this files gives me back access and admin account worked correctly.

Hope this helps anyone

slierninja
Communicator

This same issue happened to me after I created a new Authorization Role and failed to assign any capabilities. Ensure you at minimum have the search capability.

Default User Role Capabilities

  • change_own_password
  • get_metadata
  • get_typeahead
  • input_file
  • list_inputs
  • output_file
  • request_remote_tok
  • rest_apps_view
  • rest_properties_get
  • rest_properties_set
  • search

smolcj
Builder

is there any way to revert the admin properties?

0 Karma

smolcj
Builder

is it because i changed some admin properties.. help me to revert it

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...