All Apps and Add-ons

Eventgen.py missing - intended?

romanwaldecker
Path Finder

I am missing the eventgen.py file in the $SPLUNK_HOME/etc/apps/<'Eventgen_app_name>/bin/ folder after having installed SA-Eventgen through Splunkbase. It is also missing in the eventgen GIT repository (there doesn't even exist a bin folder!).

Is this intended?
If not, any ideas why I don't get it?

The eventgen.py file is mentioned in several references and it seems to me that it is essential for the App to run. I aligned my setup with several tutorials out there and am pretty sure that the rest of my configuration is in line. When troubleshooting, I tried to execute eventgen.py manually - when I discovered that it is missing.

0 Karma
1 Solution

romanwaldecker
Path Finder

Got it - I downloaded the wrong branch from the repository (the selected-by-default 'develop' branch).
Doesn't explain though, why the Splunkbase App did not have the .py-file...

View solution in original post

bkogami
Explorer

I downloaded Eventgen 6.4.0 from Splunkbase, installed it from the Splunk web console and it created a "SA-Eventgen" app.

It did not include eventgen.py

Anyone have any ideas? Why is it missing? Am I doing something wrong?

0 Karma

romanwaldecker
Path Finder

Got it - I downloaded the wrong branch from the repository (the selected-by-default 'develop' branch).
Doesn't explain though, why the Splunkbase App did not have the .py-file...

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...