Trouble indexing 'File Meta-Data' on Windows volume

Highlander22 — Mon, 27 Sep 2021 14:45:56 GMT

Hi@LukeMurphey , I am hoping you can help with your File Meta-Data addon that I am hoping is just what I need.

I have been trying to get it working for a while now but it just didn't seem to do anything after setting up my Data Input.

I've done a bit more digging today in the 'file_meta_data_modular_input.log' log file and I am getting the following error reported:

2021-09-27 15:24:06,745 ERROR Execution failed
Traceback (most recent call last):
File "D:\Program Files\Splunk\etc\apps\file_meta_data\bin\modular_input.zip\modular_input\modular_input_base_class.py", line 1095, in execute
self.do_run(in_stream, log_exception_and_continue=True)
File "D:\Program Files\Splunk\etc\apps\file_meta_data\bin\modular_input.zip\modular_input\modular_input_base_class.py", line 976, in do_run
self.run(stanza, cleaned_params, input_config)
File "D:\Program Files\Splunk\etc\apps\file_meta_data\bin\file_meta_data.py", line 641, in run
file_filter=file_filter)
File "D:\Program Files\Splunk\etc\apps\file_meta_data\bin\file_meta_data.py", line 187, in get_files_data
file_path = file_path.encode("utf-8")
AttributeError: 'bytes' object has no attribute 'encode'

As the error is caused in the bold line above in the .py file, I guess this may be something to do with my Splunk Enterprise (Free version) running on a Windows 10 machine, trying to index Windows volumes.

FYI in my Data Input, it doesn't matter if I have the "File or directory path" as "L:\" or "L:" or anything else (i.e. I want to index my L:\ volume), it just reports this error.

Sorry this is probably a noob question but any help would be appreciated. FYI I am using v1.4.5 of your add-on.

Many thanks in advance.

topic Trouble indexing 'File Meta-Data' on Windows volume in Getting Data In

Trouble indexing 'File Meta-Data' on Windows volume