I have a Splunk Azure Website Diagnostics Data Input that will stop collecting data from Azure. At the time when data capture has stopped there are some logs in splunkd.log of the Peer Indexer:
06-12-2016 12:45:27.229 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py" Traceback (most recent call last):
06-12-2016 12:45:27.229 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py" File "/opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py", line 342, in
06-12-2016 12:45:27.229 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py" do_run()
06-12-2016 12:45:27.229 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py" File "/opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py", line 233, in do_run
06-12-2016 12:45:27.229 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py" blobs = block_blob_service.list_blobs(site_diag_container)
06-12-2016 12:45:27.229 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py" File "/opt/splunk/etc/apps/TA-Azure/bin/azure/storage/blob/baseblobservice.py", line 1154, in list_blobs
06-12-2016 12:45:27.231 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py" resp = self._list_blobs(*args, **kwargs)
06-12-2016 12:45:27.232 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py" File "/opt/splunk/etc/apps/TA-Azure/bin/azure/storage/blob/baseblobservice.py", line 1224, in _list_blobs
06-12-2016 12:45:27.232 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py" response = self._perform_request(request)
06-12-2016 12:45:27.232 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py" File "/opt/splunk/etc/apps/TA-Azure/bin/azure/storage/storageclient.py", line 137, in _perform_request
06-12-2016 12:45:27.233 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py" raise AzureException('{}: {}'.format(ex.__class__.__name__, ex.args[0]))
06-12-2016 12:45:27.233 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-Azure/bin/AzureWebsiteDiagnostics.py" azure.common.AzureException: ConnectionError: HTTPSConnectionPool(host='storagexx.blob.core.windows.net', port=443): Max retries exceeded with url: /logs?restype=container&comp=list (Caused by NewConnectionError(': Failed to establish a new connection: [Errno 110] Connection timed out',))
Has anyone experienced this issue? Could there possibly be a way to modify the Max Retries?
The only way to get logging to start again is to modify the Data Input's configuration and re-save...then logging with catch up.
Thanks in advance for any help or suggestions.
↧
Azure Website Diagnostics Data Input stops capturing data from Azure...logs say Connection timed out
↧