All Apps and Add-ons

Can you help me get the File/Directory Information Input working?

kozanic_FF
Path Finder

I'm trying to get the File/Directory Information Input app working but I'm struggling.

The place I'm working has this installed on a couple of heavy forwarders (HF), but neither seems to be generating any data. Looking in the internal logs, I can see the below error present from both HFs ( App version 1.1.2 running on these / Splunk 6.6):

ERROR ModularInputs - Introspecting scheme=file_meta_data: script running failed (exited with code 1).
ERROR ModularInputs - Unable to initialize modular input "file_meta_data" defined inside the app "file_meta_data": Introspecting scheme=file_meta_data: script running failed (exited with code 1).

I have also attempted to install and run on a new HF, which I have set-up but am getting a different error (latest App version 1.3 with Splunk 7.0.5):

uiHelper processValueEdit operator failed for endpoint_path=data/inputs/file_meta_data/FileMonitorTest elementName=spl-ctrl_sourcetypeSelect: list index out of range
uiHelper submitValueEdit operator failed for endpoint_base=data/inputs/file_meta_data entity_name=FileMonitorTest elementName=sourcetype: invalid syntax (<string>, line 1)

Not great with Python, so struggling to figure out how to resolve these issues.

Any assistance that can be provided would be great.

If additional information is required to assist - I'm happy to provide.

0 Karma
1 Solution

kozanic_FF
Path Finder

Not really sure what the issue was here, but after upgrading the add-on to the latest version and restarting splunk, things started working.

Assuming some Python issue which was fixed in a later version.

View solution in original post

kozanic_FF
Path Finder

Not really sure what the issue was here, but after upgrading the add-on to the latest version and restarting splunk, things started working.

Assuming some Python issue which was fixed in a later version.

Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...