All Apps and Add-ons

Eventgen.py missing - intended?

romanwaldecker
Path Finder

I am missing the eventgen.py file in the $SPLUNK_HOME/etc/apps/<'Eventgen_app_name>/bin/ folder after having installed SA-Eventgen through Splunkbase. It is also missing in the eventgen GIT repository (there doesn't even exist a bin folder!).

Is this intended?
If not, any ideas why I don't get it?

The eventgen.py file is mentioned in several references and it seems to me that it is essential for the App to run. I aligned my setup with several tutorials out there and am pretty sure that the rest of my configuration is in line. When troubleshooting, I tried to execute eventgen.py manually - when I discovered that it is missing.

0 Karma
1 Solution

romanwaldecker
Path Finder

Got it - I downloaded the wrong branch from the repository (the selected-by-default 'develop' branch).
Doesn't explain though, why the Splunkbase App did not have the .py-file...

View solution in original post

bkogami
Explorer

I downloaded Eventgen 6.4.0 from Splunkbase, installed it from the Splunk web console and it created a "SA-Eventgen" app.

It did not include eventgen.py

Anyone have any ideas? Why is it missing? Am I doing something wrong?

0 Karma

romanwaldecker
Path Finder

Got it - I downloaded the wrong branch from the repository (the selected-by-default 'develop' branch).
Doesn't explain though, why the Splunkbase App did not have the .py-file...

Get Updates on the Splunk Community!

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...