topic Re: subscription_modular_input.py error message in Splunk cloud gateway in All Apps and Add-ons

subscription_modular_input.py error message in Splunk cloud gateway

srichansen — Wed, 30 Sep 2020 00:40:03 GMT

Hi all,

I am suddenly getting the following error in my Splunk cloud gateway app and can't see to correct it.

Unable to initialize modular input "subscription_modular_input" defined inside the app "splunk_app_cloudgateway": Introspecting scheme=subscription_modular_input: script running failed (exited with code 1).

Running the failed script above via Splunk cmd gives the following error. Looking for the missing libraries shows them all in their correct place.

/opt/splunk/bin/splunk cmd python /opt/splunk/etc/apps/splunk_app_cloudgateway/bin/subscription_modular_input.py Traceback (most recent call last):   File "/opt/splunk/etc/apps/splunk_app_cloudgateway/bin/subscription_modular_input.py", line 24, in <module>
    from spacebridgeapp.sodium_client import SodiumClient   File "/opt/splunk/etc/apps/splunk_app_cloudgateway/bin/spacebridgeapp/sodium_client/__init__.py", line 1, in <module>
    from sodium_client import SodiumClient   File "/opt/splunk/etc/apps/splunk_app_cloudgateway/bin/spacebridgeapp/sodium_client/sodium_client.py", line 10, in <module>
    from sodium import sodium_server_pb2 as sodium   File "/opt/splunk/etc/apps/splunk_app_cloudgateway/bin/spacebridgeapp/sodium_client/sodium/sodium_server_pb2.py", line 6, in <module>
    from google.protobuf.internal import enum_type_wrapper ImportError: No module named protobuf.internal

Can anyone steer me in the right direction to correct this,

thanks in advance
Simon

Re: subscription_modular_input.py error message in Splunk cloud gateway

DavidHourani — Fri, 24 May 2019 12:44:27 GMT

@srichansen, did you make any changes before getting this ? have a look here this could be a step in the right direction : https://docs.splunk.com/Documentation/Gateway/1.3.1/Registration/TroubleshootGateway or just go for support, it weird that this just drops...

Re: subscription_modular_input.py error message in Splunk cloud gateway

casingc_splunk — Fri, 24 May 2019 16:48:15 GMT

It looks like one of the import libraries is missing. Can you try reinstalling the app?

Re: subscription_modular_input.py error message in Splunk cloud gateway

srichansen — Mon, 27 May 2019 07:34:48 GMT

Hi,

There were no changes in the system to do with cloud gateway. The only changes were within an app and should not affect the system files.

I should have added that i have tried re-installing, cleaning the app off the system and installing it again and
over installing Splunk again (update) to refresh the python2.7 files.

Somehow it seems that whatever has changed is not being undone by the updates or resets above.

regards,
Simon

Re: subscription_modular_input.py error message in Splunk cloud gateway

DavidHourani — Mon, 27 May 2019 07:53:09 GMT

I'd say go for support 🙂

Re: subscription_modular_input.py error message in Splunk cloud gateway

srichansen — Mon, 08 Jul 2019 13:40:20 GMT

I have worked out what the issue is with the cloud gateway.

If you install any other apps that use the google proto-buffer protocol, cloud gateway will stop working.

Removal of that app will get it working again.

Thanks for help all.
Kind regards,
Simon

Re: subscription_modular_input.py error message in Splunk cloud gateway

Sridhar_bu — Wed, 30 Sep 2020 03:02:33 GMT

Just update your proxy details in splunk-launch.conf and also in the $Splunk_Home\etc\apps\splunk_app_cloudgateway\local\cloudgateway.conf and then restart splunk.
This will take care of the error\issue.

Tested ..!!!