topic Re: Python Alert Script not running when using pyodbc in Alerting

Python Alert Script not running when using pyodbc

bruceclarke — Wed, 12 Feb 2014 01:18:23 GMT

All,

I ran into an issue with my python alert script after trying to import pyodbc into my script. I read elsewhere that it might be due to Splunk's version of python not being able to import pyodbc. So, I created a wrapper python script as described here: http://answers.splunk.com/answers/10839/scripted-lookup-script-doesnt-work-with-splunk-python-version-but-works-fine-with-python-27.

When I run

splunk cmd python "path/to/python/wrapper"

everything works fine. I see the output and it sends an email as I expected. However, when the alert gets triggered by Splunk, the script fails. I see the following error in splunkd.log:

02-11-2014 20:04:05.573 -0500 WARN  script - Maxinputs must be at least 10000, command name="runshellscript"

Any ideas on how to fix this? Thanks!

Re: Python Alert Script not running when using pyodbc

bruceclarke — Wed, 12 Feb 2014 01:19:11 GMT

Oh, and just to be clear, the script runs fine if I remove the reference to pyodbc and skip my table lookup (ultimately, though, I need to make this call).

Re: Python Alert Script not running when using pyodbc

bruceclarke — Mon, 08 Dec 2014 22:36:25 GMT

There were two versions of python on the machine. This led to a conflict that was masked by a hard to decipher error message in Splunk.