Splunk Add-on for AWS: 3.0.0
Splunk App for AWS: 4.1.1
Error Splunk App for AWS S3 Configure Input:
Unexpected error occurs. In handler 'splunk_app_aws_aws_s3buckets': Unexpected error "" from python handler: "BotoClientError: When using SigV4, you must specify a 'host' parameter.". See splunkd.log for more details.
Error at command line: **/opt/splunk/var/log/splunk/splunkd.log**
04-25-2016 10:40:29.392 +0000 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n File "/opt/splunk/lib/python2.7/site-packages/splunk/admin.py", line 70, in init\n hand.execute(info)\n File "/opt/splunk/lib/python2.7/site-packages/splunk/admin.py", line 529, in execute\n if self.requestedAction == ACTION_LIST: self.handleList(confInfo)\n File "/opt/splunk/etc/apps/splunk_app_aws/bin/aws_s3buckets_handler.py", line 49, in handleList\n buckets = au.list_s3_buckets(proxy, aws_account)\n File "/opt/splunk/etc/apps/splunk_app_aws/bin/aws/aws_utils.py", line 150, in list_s3_buckets\n proxy_user=proxy.username, proxy_pass=proxy.password)\n File "/opt/splunk/etc/apps/splunk_app_aws/bin/boto/__init__.py", line 141, in connect_s3\n return S3Connection(aws_access_key_id, aws_secret_access_key, **kwargs)\n File "/opt/splunk/etc/apps/splunk_app_aws/bin/boto/s3/connection.py", line 196, in __init__\n "When using SigV4, you must specify a 'host' parameter."\nHostRequiredError: BotoClientError: When using SigV4, you must specify a 'host' parameter.\n
04-25-2016 10:40:29.393 +0000 ERROR AdminManagerExternal - Unexpected error "" from python handler: "BotoClientError: When using SigV4, you must specify a 'host' parameter.". See splunkd.log for more details.
I am using KMS encrypted CloudTrail logs but I have already updated **/opt/splunk/etc/splunk-launch.conf** with:
S3_USE_SIGV4 = True
I'm not sure why I'm getting this error because all my other S3 buckets are not encrypted.
I would also like to mention that I sent a request to sales@splunk.com to puchase an Annual Term License so I can get support but so far no reply. :(
![alt text][1]
[1]: /storage/temp/126228-configures3splunkappforaws.jpg
↧