All Apps and Add-ons

Help starting SecureX Threat Response Relay Module

umontero
New Member

Hello,

 

I'm having issues when trying to start the SSE Connector Configuration from the SecureX Relay Module,

I'm running a Windows 10 VM

Splunk version 9.0.2

App version has been tested with 1.0.0 and 1.1.1 same issue persists

Following logs have been observed in the splunkd.log

11-14-2022 19:47:47.394 -0600 ERROR AdminManagerExternal - Stack trace from python handler:\nTraceback (most recent call last):\n File "C:\Program Files\Splunk\etc\apps\relay-module\bin\shell_client.py", line 95, in run\n self._run_command(*args)\n File "C:\Program Files\Splunk\etc\apps\relay-module\bin\shell_client.py", line 67, in _run_command\n stdin=DEVNULL\n File "C:\Program Files\Splunk\Python-3.7\lib\subprocess.py", line 800, in __init__\n restore_signals, start_new_session)\n File "C:\Program Files\Splunk\Python-3.7\lib\subprocess.py", line 1207, in _execute_child\n startupinfo)\nFileNotFoundError: [WinError 2] The system cannot find the file specified\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File "C:\Program Files\Splunk\etc\apps\relay-module\bin\connect_handler.py", line 39, in start_connector\n client.run_action()\n File "C:\Program Files\Splunk\etc\apps\relay-module\bin\sse_connector_client.py", line 41, in run_action\n supported_commands[self.action]()\n File "C:\Program Files\Splunk\etc\apps\relay-module\bin\sse_connector_client.py", line 51, in start\n self.shell.run_connector()\n File "C:\Program Files\Splunk\etc\apps\relay-module\bin\shell_client.py", line 161, in run_connector\n self.shell.run()\n File "C:\Program Files\Splunk\etc\apps\relay-module\bin\shell_client.py", line 97, in run\n raise ShellError(str(err))\nerrors.ShellError: [WinError 2] The system cannot find the file specified\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File "C:\Program Files\Splunk\Python-3.7\lib\site-packages\splunk\admin.py", line 151, in init\n hand.execute(info)\n File "C:\Program Files\Splunk\Python-3.7\lib\site-packages\splunk\admin.py", line 638, in execute\n if self.requestedAction == ACTION_EDIT: self.handleEdit(confInfo)\n File "C:\Program Files\Splunk\etc\apps\relay-module\bin\relay_module\aob_py3\splunktaucclib\rest_handler\admin_external.py", line 39, in wrapper\n result = meth(self, confInfo)\n File "C:\Program Files\Splunk\etc\apps\relay-module\bin\relay_module\aob_py3\splunktaucclib\rest_handler\admin_external.py", line 129, in handleEdit\n self.payload,\n File "C:\Program Files\Splunk\etc\apps\relay-module\bin\connect_handler.py", line 62, in update\n self.start_connector(data)\n File "C:\Program Files\Splunk\etc\apps\relay-module\bin\connect_handler.py", line 43, in start_connector\n err.message\nsplunktaucclib.rest_handler.error.RestError: REST Error [500]: Internal Server Error -- [WinError 2] The system cannot find the file specified\n

 

Something I have noticed is that while comparing the log files from a Linux instance vs this Windows instance, I don't see a log file for the Relay-module, not sure if this is related

 

 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...