topic Re: Gsuite for Splunk script error in All Apps and Add-ons

Gsuite for Splunk script error

bcyates — Mon, 11 Jun 2018 21:33:31 GMT

We have followed steps to configure GSuite Input Add-on. The authorize portion of the setup works just fine, but the only data indexed are error messages that say "Expected string or buffer" on line 101 of the ga.py script. Not sure how to troubleshoot past this point as I'm not much of a developer and do not know what that error message means.

Re: Gsuite for Splunk script error

alacercogitatus — Mon, 11 Jun 2018 21:40:20 GMT

Hi! App author here. What version of GSuite?

Re: Gsuite for Splunk script error

bcyates — Mon, 11 Jun 2018 21:44:41 GMT

Hi! version = 1.2.1of IA-GSuiteforSplunk on a Heavy Forwarder, version 7.0.4

Re: Gsuite for Splunk script error

alacercogitatus — Mon, 11 Jun 2018 22:12:18 GMT

Find me tomorrow on Slack. I think you are second on that error, so want some additional info.

splk.it/slack Thanks!

Re: Gsuite for Splunk script error

bcyates — Tue, 12 Jun 2018 14:34:07 GMT

I've submitted my info. Just waiting for an approval I supppose

Re: Gsuite for Splunk script error

bcyates — Wed, 13 Jun 2018 22:08:30 GMT

Bump. Anyone with an idea?

Re: Gsuite for Splunk script error

alacercogitatus — Thu, 14 Jun 2018 11:29:36 GMT

Line 101 of version 1.2.1 deals with the encrypted credential store. I will make logging better around that section, but if it didn't find a string, it is most likely a None type, which means your credentials didn't save correctly. Delete any google credentials from the store, and re-authorize.

Re: Gsuite for Splunk script error

praneshjan — Wed, 25 Jul 2018 06:31:58 GMT

Hi bcyates. Did you find the solution for this issue yet? Even we are facing the same. Please share if this issue was solved. It would be very helpful.

Re: Gsuite for Splunk script error

tpetersonalpine — Wed, 15 Aug 2018 19:40:46 GMT

Still seeing this with 1.2.3 I think there's a bug here. Anyone able to see token logs with the latest code?

Re: Gsuite for Splunk script error

alacercogitatus — Wed, 15 Aug 2018 19:43:44 GMT

email me with better specifics. version 1.2.3 doesn't have that line at 101..... or find me on slack.

Re: Gsuite for Splunk script error

tpetersonalpine — Tue, 29 Sep 2020 20:55:21 GMT

I have to eat my words

[ga://token]
disabled = false
domain = dev-company.com
extraconfig = {}
index = gsuite_glbl
interval = 3600

proxy_name = not_configured

servicename = report:token

Once I changed domain to domain = dev.company.com I got it working
So to answer my own question: I have token working!