SplunkWeb UI访问失败，出现“意外情况”

适用范围

Splunk企业

描述

SplunkWeb UI访问失败，并显示以下消息
 

"The server encountered an unexpected condition which prevented it from fulfilling the 
request. Click here to return to Splunk homepage"

调查

$SPLUNK_HOME/var/log/splunk/web_service.log中报告了以下错误
 

2019-09-10 07:25:58,388 INFO [5d7741f661397e0ba470] error:323 - HEAD /favicon.ico 127.0.0.1 
8065
2019-09-10 07:25:58,390 INFO [5d7741f661397e0ba470] error:324 - 500 Internal Server Error 
The server encountered an unexpected condition which prevented it from fulfilling the request.
2019-09-10 07:25:58,390 ERROR [5d7741f661397e0ba470] error:325 - Traceback (most recent call last):
File "S:\Program Files\Splunk\Python-2.7\Lib\site-packages\cherrypy\_cprequest.py", line 598, in respond
self.hooks.run('before_request_body')
File "S:\Program Files\Splunk\Python-2.7\Lib\site-packages\cherrypy\_cprequest.py", line 98, in run
hook()
File "S:\Program Files\Splunk\Python-2.7\Lib\site-packages\cherrypy\_cprequest.py", line 58, in __call__
return self.callback(**self.kwargs)
File "S:\Program Files\Splunk\Python-2.7\Lib\site-packages\cherrypy\lib\sessions.py", line 651, in init
timeout=timeout, domain=domain, secure=secure, httponly=httponly)
File "S:\Program Files\Splunk\Python-2.7\Lib\site-packages\cherrypy\lib\sessions.py", line 688, in set_response_cookie
cookie[name]['expires'] = http.HTTPDate(time.time() + timeout)
TypeError: unsupported operand type(s) for +: 'float' and 'str'

验证是否已将字符串设置为web.conf中的其中一个超时值

$SPLUNK_HOME/bin/splunk btool web list settings

[settings]
busyKeepAliveIdleTimeout = 12
keepAliveIdleTimeout = 7200
response.timeout = 7200
splunkdConnectionTimeout = 30
tools.sessions.timeout = 60
ui_inactivity_timeout = 60

以上是默认设置，但是如果有任何更改为一个字符串（例如，tools.sessions.timeout = 1h），则恢复为默认值并验证问题是否仍然存在。

分辨率

如果所有超时值均有效，一个可能的解决方法是修改sessions.py以显式设置最大老化时间。
 

$SPLUNK_HOME/lib/python2.7/site-packages/cherrypy/lib/sessions.py

更改以下内容：
 

# We'd like to use the "max-age" param as indicated in
    # http://www.faqs.org/rfcs/rfc2109.html but IE doesn't
    # save it to disk and the session is lost if people close
    # the browser. So we have to use the old "expires" ... sigh ...
##    cookie[name]['max-age'] = timeout * 60
    if timeout:
        #cookie[name]['expires'] = http.HTTPDate(time.time() + (timeout * 60))
        # Replace Cherrypy's version of this so that cookies alwasy last for
        # 24 hours by default - Setting them to 1 hour causes problems for IE
        # users who's clocks are off from the server
        timeout = timeout * 60 # convert to seconds
        if timeout < 86400:
            timeout = 86400 # Cookies last at least 24 hours
        try:
                cookie[name]['expires'] = http.HTTPDate(time.time() + timeout)
        except TypeError:
                raise AssertionError("HTTPDate error, timeout=%s not set." % timeout)

执行此更改：
 

# http://www.faqs.org/rfcs/rfc2109.html but IE doesn't 
# save it to disk and the session is lost if people close 
# the browser. So we have to use the old "expires" ... sigh ... 
## cookie[name]['max-age'] = timeout * 60 
cookie[name]['max-age'] = 86400
###   if timeout:
        #cookie[name]['expires'] = http.HTTPDate(time.time() + (timeout * 60))
        # Replace Cherrypy's version of this so that cookies alwasy last for
        # 24 hours by default - Setting them to 1 hour causes problems for IE
        # users who's clocks are off from the server
###       timeout = timeout * 60 # convert to seconds
###       if timeout < 86400:
###           timeout = 86400 # Cookies last at least 24 hours
###       cookie[name]['expires'] = http.HTTPDate(time.time() + timeout)

然后重新启动Splunk

修订历史记录

版本	发布日期	备注
1.0	28-Sep-2026	初始版本