cloudfoundry-community / splunk-firehose-nozzle

Send CF component metrics, CF app logs, and CF app metrics to Splunk
Apache License 2.0
29 stars 30 forks source link

Getting 404 from the app when connecting to splunk #128

Closed BalaSubramanian-L closed 6 years ago

BalaSubramanian-L commented 6 years ago

Hi,

I am setting up splunk nozzle and face below issue. the app goes into a loop of 404 "The requested URL was not found on this server" error.

using curl -k http://splunkhostname/services/collector -H 'Authorization: Splunk token' -d '{"sourcetype": "firehose", "event":"Hello, World!", "index":"cf"}' i get a valid response {"text":"Success","code":0}

What might be wrong in the app setup to cause this behavior.

issue logs: 2018-02-14T11:51:55.719-05:00 [APP/PROC/WEB/0] [OUT] {"timestamp":"1518627115.718893290","source":"splunk-nozzle-logger","message":"splunk-nozzle-logger.Found 275 apps","log_level":1,"data":{}} 2018-02-14T11:51:55.967-05:00 [APP/PROC/WEB/1] [OUT] {"timestamp":"1518627115.967179775","source":"splunk-nozzle-logger","message":"splunk-nozzle-logger.Found 275 apps","log_level":1,"data":{}} 2018-02-14T11:51:59.751-05:00 [APP/PROC/WEB/0] [OUT] {"timestamp":"1518627119.750710011","source":"splunk-nozzle-logger","message":"splunk-nozzle-logger.Unable to talk to Splunk","log_level":2,"data":{"error":"Non-ok response code [404] from splunk: {\"text\":\"The requested URL was not found on this server.\",\"code\":404}"}} 2018-02-14T11:51:59.751-05:00 [APP/PROC/WEB/0] [OUT]

Manifest file:

applications:

chenziliang commented 6 years ago

please drop /services/collector from SPLUNK_HOST

BalaSubramanian-L commented 6 years ago

hey it worked ty.