topic Re: Unable to run Pyhton script which came default with Cybereason app in Splunk Dev

Unable to run Pyhton script which came default with Cybereason app

Reddi694325 — Sat, 20 Mar 2021 15:34:23 GMT

When I ran the python script the above error throwing as shown in the screen shot. Installed python3 on the environment. Could some help me with the same.

Re: Unable to run Pyhton script which came default with Cybereason app

richgalloway — Sat, 20 Mar 2021 16:48:55 GMT

There's no need to install Python 3 because it comes with Splunk Enterprise. Be sure to run the scripts that come with apps in the Splunk environment.

splunk cmd python cybereason.py

Re: Unable to run Pyhton script which came default with Cybereason app

Reddi694325 — Sat, 20 Mar 2021 16:53:11 GMT

Hi richgalloway,

I ran it but no positive sign. I am unable to understand where am I missing

Re: Unable to run Pyhton script which came default with Cybereason app

Vardhan — Sat, 20 Mar 2021 17:46:41 GMT

Hi @Reddi694325 ,

you are running the command in /opt/splunk/bin .But the script was exist in /opt/splunk/etc/apps/cybearreasonforsplunk/bin directory.

Run the command in /opt/splunk/etc/apps/cybearreasonforsplunk/bin/splunk cmd python cybereason.py

And see whether its works or not.

Re: Unable to run Pyhton script which came default with Cybereason app

Reddi694325 — Sat, 20 Mar 2021 17:54:02 GMT

Hi Vardhan,

In the previous case I ran in both the places like from Splunk_Home/bin and from App/Bin. For better understanding I ran the command as you suggested and the screenshot is pasted here. Kindly check and help me with the same.

Thanks In Advance.

Thanks & Regards,

Reddy.

Re: Unable to run Pyhton script which came default with Cybereason app

Reddi694325 — Sat, 20 Mar 2021 19:31:13 GMT

Hi,

The issue got resolved by adding Splunk home path in environment variables. But another problem started as shown below.

[root@Searchhead2 bin]# vi cybereason.py
[root@Searchhead2 bin]# splunk cmd python cybereason.py
Traceback (most recent call last):
File "cybereason.py", line 25, in <module>
_SPLUNK_HOME = make_splunkhome_path([""])
NameError: name 'make_splunkhome_path' is not defined
[root@Searchhead2 bin]#

Could some one let me know what is the error related to.

I understood like we need to define make_splunk_home_path. But don't know where to define.

Kindly help me with the same.

Thanks & Regards,

Reddi

Re: Unable to run Pyhton script which came default with Cybereason app

Reddi694325 — Sun, 21 Mar 2021 05:04:22 GMT

Hi team,

Finally cracked it.

Step -1

Might have to add environment variables for Splunk and check whether are you able to run Splunk command globally.

Step -2

Import the proper module related to the script.

Example:-
The below screen shot indicates the error.

to resolve the above issue below module need to import

from splunk.appserver.mrsparkle.lib.util import make_splunkhome_path

Post importing the module the issue resolved

Thanks & Regards,

Reddi.