All Apps and Add-ons

Getting error when trying to setup input after installing app

cichris
Engager

Anyone have an install install with this app? I can't setup any inputs and am new to splunk. I checked the splunkd.log file and is getting an exception on a date formatting function of all things..

11-26-2019 20:21:11.299 -0500 WARN  LocalAppsAdminHandler - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':  The script at path=C:\Program Files\Splunk\etc\apps\TA-microsoft-graph-security-add-on-for-splunk\bin\TA_microsoft_graph_security_add_on_for_splunk_rh_microsoft_graph_security.py has thrown an exception=Traceback (most recent call last):
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':    File "C:\Program Files\Splunk\bin\runScript.py", line 82, in <module>
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':      exec(open(REAL_SCRIPT_NAME).read())
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':    File "<string>", line 4, in <module>
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':    File "C:\Program Files\Splunk\etc\apps\TA-microsoft-graph-security-add-on-for-splunk\bin\ta_microsoft_graph_security_add_on_for_splunk\splunktaucclib\rest_handler\endpoint\validator.py", line 388
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':      except ValueError, exc:
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':                       ^
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':  SyntaxError: invalid syntax
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':  Traceback (most recent call last):
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':    File "C:\Program Files\Splunk\bin\runScript.py", line 82, in <module>
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':      exec(open(REAL_SCRIPT_NAME).read())
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':    File "<string>", line 4, in <module>
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':    File "C:\Program Files\Splunk\etc\apps\TA-microsoft-graph-security-add-on-for-splunk\bin\ta_microsoft_graph_security_add_on_for_splunk\splunktaucclib\rest_handler\endpoint\validator.py", line 388
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':      except ValueError, exc:
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':                       ^
11-26-2019 20:21:11.578 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\Python3.exe C:\Program Files\Splunk\bin\runScript.py setup':  SyntaxError: invalid syntax
11-26-2019 20:21:11.707 -0500 ERROR AdminManagerExternal - External handler failed with code '1' and output: ''.  See splunkd.log for stderr output.

vsingla1
Communicator

@cichris I hope you got to know the new version of this add-on has support for python 3. The new version is available to download. I have installed this new add-on version on splunk version 8.0.1. It is successfully running and able to pull the data from microsoft graph api.

0 Karma

CarsonZa
Contributor

im assuming you're on 8.x which uses python 3. That app does not support python 3 at this time. solutions are to wait until the app has a rewrite or downgrade splunk to 7.3.3.

Get Updates on the Splunk Community!

Celebrating Fast Lane: 2025 Authorized Learning Partner of the Year

At .conf25, Splunk proudly recognized Fast Lane as the 2025 Authorized Learning Partner of the Year. This ...

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...