Splunk Dev

Exception when i try to extract fields in the web interface

dkerwin
Engager

No matter on what message i try to extract fileds i end up with a short Python exception (Error 500):

AttributeError: 'str' object has no attribute 'toPrimitive'

Here's the full exception:

2010-10-14 14:44:00,261 INFO    [4cb6fb0ef723b24d0] FieldLearning:56 - GENERATING RULES FROM 100 EVENTS
2010-10-14 14:44:00,994 WARNING [4cb6fb0ef723b24d0] format:47 - There was an error parsing the feed document. Error: PCDATA invalid Char value 27, line 24899, column 44
2010-10-14 14:44:00,995 INFO    [4cb6fb0ef723b24d0] _cplogging:55 - [14/Oct/2010:14:44:00] HTTP 
Request Headers:
  REFERER: http://172.20.50.235:8000/en-US/app/search/flashtimeline?q=search%20*
  HOST: 172.20.50.235:8000
  ACCEPT: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
  ACCEPT-CHARSET: ISO-8859-1,utf-8;q=0.7,*;q=0.3
  USER-AGENT: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_4; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.472.63 Safari/534.3
  CONNECTION: keep-alive
  COOKIE: session_id_8000=d350af526b47d6a37201356333c4206785356e8e
  Remote-Addr: 172.20.50.105
  ACCEPT-LANGUAGE: en-US,en;q=0.8
  ACCEPT-ENCODING: gzip,deflate,sdch
2010-10-14 14:44:00,995 DEBUG   [4cb6fb0ef723b24d0] _cplogging:55 - [14/Oct/2010:14:44:00] HTTP Traceback (most recent call last):
  File "/data/splunk/lib/python2.6/site-packages/cherrypy/_cprequest.py", line 606, in respond
    cherrypy.response.body = self.handler()
  File "/data/splunk/lib/python2.6/site-packages/cherrypy/_cpdispatch.py", line 25, in __call__
    return self.callable(*self.args, **self.kwargs)
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/routes.py", line 307, in default
    return route.target(self, **kw)
  File "<string>", line 1, in <lambda>
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/decorators.py", line 38, in rundecs
    return fn(*a, **kw)
  File "<string>", line 1, in <lambda>
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/decorators.py", line 93, in check
    return fn(self, *a, **kw)
  File "<string>", line 1, in <lambda>
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/decorators.py", line 141, in validate_ip
    return fn(self, *a, **kw)
  File "<string>", line 1, in <lambda>
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/decorators.py", line 275, in preform_sso_check
    return fn(self, *a, **kw)
  File "<string>", line 1, in <lambda>
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/decorators.py", line 312, in check_login
    return fn(self, *a, **kw)
  File "<string>", line 1, in <lambda>
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/decorators.py", line 333, in handle_exceptions
    return fn(self, *a, **kw)
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/controllers/ifx.py", line 97, in index
    if not fieldNameExtractionExists(args, regex):
  File "/data/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/controllers/ifx.py", line 414, in fieldNameExtractionExists
    props = bundle.getConf('props', sessionkey, namespace, owner)
  File "/data/splunk/lib/python2.6/site-packages/splunk/bundle.py", line 46, in getConf
    stanzas = confFeed.toPrimitive()
AttributeError: 'str' object has no attribute 'toPrimitive'

Thanks

Daniel

Tags (1)

ftk
Motivator

I recommend contacting Splunk support about this issue.

Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...