https://community.splunk.com/t5/All-Apps-and-Add-ons/Modular-input-using-my-Python-library-is-not-working-an-am-stuck/m-p/248152#M28282 <P>This command came from a presentation that was given at .Conf last week. It may help you testing....modify to fit your module names.</P> <P>splunk cmd splunkd print-­‐modinput-­‐config </P> <P>| $SPLUNK_HOME/bin/splunk cmd python </P> Thu, 01 Oct 2015 14:57:18 GMT snowmizer 2015-10-01T14:57:18Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Modular-input-using-my-Python-library-is-not-working-an-am-stuck/m-p/248151#M28281 <P>Hello </P> <P>I'm trying to create a modular input for Splunk for our product, Qumulo clusters (qumulo.com/products/qumulo-core/). We have a REST API that exposes data about our storage clusters and some of our customers want to explore and manage information about their clusters using Splunk.</P> <P>I've created (with Damien Dallimore's help) a first version of a modular input which you can see here (it is public and on GitHub):</P> <P>github.com/Qumulo/qumulo_splunk</P> <P>It loads into Splunk Enterprise with no problems/errors/warnings, but I see no data for my modular input or Wcript in splunk (my script is $SPLUNK_HOME/etc/apps/qumulo_app/bin/qumulo.py on my machine). </P> <P>I ran</P> <PRE><CODE>../../bin/splunk cmd python qumulo_app/bin/qumulo.py —scheme </CODE></PRE> <P>and the scheme looks OK to me (from a naive perspective at least -- no errors) and when I run a Splunk search like this:</P> <PRE><CODE>index=_internal ExecProcessor error qumulo.py </CODE></PRE> <P>I don't see any meaningful results. I've added some logging.error debug messages to my script too... where do those messages get logged? Not seeing those either.</P> <P>So I'm a bit stuck. Any pointers welcome. If there are other support channels I should try, pls mention that too (I'm new to Splunk integration, obviously ;)).</P> <P>Thanks - Michael Murray / <A href="mailto:mmurray@qumulo.com" target="_blank">mmurray@qumulo.com</A></P> Tue, 29 Sep 2020 07:25:04 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Modular-input-using-my-Python-library-is-not-working-an-am-stuck/m-p/248151#M28281 michaelQumulo 2020-09-29T07:25:04Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Modular-input-using-my-Python-library-is-not-working-an-am-stuck/m-p/248152#M28282 <P>This command came from a presentation that was given at .Conf last week. It may help you testing....modify to fit your module names.</P> <P>splunk cmd splunkd print-­‐modinput-­‐config </P> <P>| $SPLUNK_HOME/bin/splunk cmd python </P> Thu, 01 Oct 2015 14:57:18 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Modular-input-using-my-Python-library-is-not-working-an-am-stuck/m-p/248152#M28282 snowmizer 2015-10-01T14:57:18Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Modular-input-using-my-Python-library-is-not-working-an-am-stuck/m-p/248153#M28283 <P>Problems solved, thanks for help. Our modular input app is now available:</P> <P><A href="https://github.com/Qumulo/qumulo_splunk_app">https://github.com/Qumulo/qumulo_splunk_app</A></P> <P>Also via Splunkbase.</P> Tue, 22 Mar 2016 23:14:01 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Modular-input-using-my-Python-library-is-not-working-an-am-stuck/m-p/248153#M28283 michaelQumulo 2016-03-22T23:14:01Z