splunk / splunk-shuttl

Splunk app for archive management, including HDFS support.
Apache License 2.0
36 stars 19 forks source link

Errors #136

Open bgsplunk opened 11 years ago

bgsplunk commented 11 years ago

I have had Shuttl running for a while on our staging servers and had been able to successfully archive/thaw and search the archived data. I have started to see the following messages. I am trying to load the Frozen buckets so that I could demo the functions and features of Shuttl and I am unable to do so. I get the ...Loading.. message in the place where the Indexes will be displayed when one tries the Thaw activity and the app just sits there. Any ideas?

2013-09-11 19:20:35,805 ERROR com.splunk.shuttl.archiver.http.JsonRestEndpointCaller: did="Tried to create JSON object from string" happened="com.amazonaws.util.json.JSONException: A JSONObject text must begin with '{' at 1 [character 2 line 1]" expected="to create object" json_string="404 - not found" 2013-09-11 19:20:35,805 WARN com.splunk.shuttl.server.distributed.RequestOnSearchPeers: warning="Executed request on distributed peer" happened="java.lang.RuntimeException: com.amazonaws.util.json.JSONException: A JSONObject text must begin with '{' at 1 [character 2 line 1]" result="will add to exceptions, which can be retrieved with getExceptions()"

petterik commented 11 years ago

You've gotten an unexpected response from one of the indexers, that I'm not handling when I try to create the a json response.

On your search head: Can you provide me with the full stack trace from the RequestOnSearchPeers exception? On your failing indexer: You might/should have gotten an exception from one of your indexers conntected to your search head. Can you provide me the errors, if any?