I am missing the eventgen.py file in the $SPLUNK_HOME/etc/apps/<'Eventgen_app_name>/bin/ folder after having installed SA-Eventgen through Splunkbase. It is also missing in the eventgen GIT repository (there doesn't even exist a bin folder!).
Is this intended?
If not, any ideas why I don't get it?
The eventgen.py file is mentioned in several references and it seems to me that it is essential for the App to run. I aligned my setup with several tutorials out there and am pretty sure that the rest of my configuration is in line. When troubleshooting, I tried to execute eventgen.py manually - when I discovered that it is missing.
Got it - I downloaded the wrong branch from the repository (the selected-by-default 'develop' branch).
Doesn't explain though, why the Splunkbase App did not have the .py-file...
I downloaded Eventgen 6.4.0 from Splunkbase, installed it from the Splunk web console and it created a "SA-Eventgen" app.
It did not include eventgen.py
Anyone have any ideas? Why is it missing? Am I doing something wrong?
Got it - I downloaded the wrong branch from the repository (the selected-by-default 'develop' branch).
Doesn't explain though, why the Splunkbase App did not have the .py-file...