Error while installing Oracle Cloud Infrastructure (OCI) Logging Addon

[yigaloz]

Hello,

When trying to install this from my Splunk Enterprise (In my Windows10 client) I'm getting:

Unable to initialize modular input "oci_logging" defined in the app "TA-oci-logging-addon": Introspecting scheme=oci_logging: script running failed (exited with code 1)..

[luizlimapg]

Hi @yigaloz,

What helped me identify errors in the configuration of this addon was enabling debug logging by editing the file $SPLUNK_HOME/etc/apps/TA-oci-logging-addon/bin/oci_logging.py, changing the string ERROR to DEBUG on line 42. Then restart Splunk.

You can check the logs using the query:
index=_internal source=*oci_logging.log

Another possibility would be to install a previous version of the addon, which might work.

[vrichards]

Currently, the Oracle Cloud Infrastructure (OCI) Logging Addon needs to be installed on a Linux-based instance, a Windows client will result in the schema error.

[vrichards]

Can you please add which version of the addon you're running?

[yigaloz]

2.3.3

From here: https://splunkbase.splunk.com/app/5222

[PickleRick]

Do you get it right after installing the addon or after you configure it? You should check _internal index for details but I suspect it might be one of those badly written addons which comes with inputs enabled by default so it's trying to run the input with no configuration and fails.

[yigaloz]

Thank you for you response,

I'm getting this error right after the installation is finished. I do see the Addon in the apps list but I can't see it in the Data Inputs section.

By the way, the installation took some time so I had to increase the splunkdConnectionTimeout in web.conf (It is also mentioned under the troubleshooting tab of the Addon)

[VKk1820]

Any luck after that with the error