topic Re: Error with Security Essentials in Splunk Enterprise

Error with Security Essentials

Ledge39 — Tue, 30 Jul 2024 12:02:31 GMT

Have just done a fresh install of Splunk 9.3.0 with Security Essentials.

I'm getting the following message

Error in 'sseidenrichment' command: (AttributeError) module 'time' has no attribute 'clock'

Can you help?

Re: Error with Security Essentials

cbrewer_splunk — Tue, 06 Aug 2024 22:17:44 GMT

Also in A&I

08-03-2024 03:38:37.525 INFO ChunkedExternProcessor [25501 searchOrchestrator] - Running process: /opt/splunk/bin/python3.9 /opt/splunk/etc/apps/SA-IdentityManagement/bin/entitymerge_command.py 08-03-2024 03:38:37.845 ERROR ChunkedExternProcessor [25506 ChunkedExternProcessorStderrLogger] - stderr: (AttributeError) module 'time' has no attribute 'clock'

I searched around and changed:
vi /opt/splunk/etc/apps/SA-Utils/lib/SolnCommon/cexe.py
Change time.clock to time.time

Re: Error with Security Essentials

chris_barrett — Wed, 21 Aug 2024 06:27:59 GMT

We're seeing a similar issue with ES7.3.1 running on Core 9.3.0.
The spathannotates custom command is failing with the same "module 'time' has no attribute 'clock'" error and, like @cbrewer_splunk, I traced it back to ./SA-Utils/lib/SolnCommon/cexe.py

We'll upgrade to ES7.3.2 (latest version at this point) but I'm not convinced that the issue will be fixed based on the Fixed Issues for ES7.3.2 - https://docs.splunk.com/Documentation/ES/7.3.2/RN/FixedIssues

Re: Error with Security Essentials

damianpadden — Tue, 12 Nov 2024 12:05:26 GMT

having the same issue after upgrading to 9.3. Running ES version 7.3.

Did the upgrade of ES resolve the issue for you. Currently getting no notables

Thanks

Damian

Re: Error with Security Essentials

Christopherscha — Tue, 03 Dec 2024 11:16:57 GMT

I hade the same issue.
For me upgrading to Es7.3.2 did solve the issue.

Re: Error with Security Essentials

GabrielTolea — Mon, 19 May 2025 13:52:57 GMT

This should be higher up. Correct solution.