All Apps and Add-ons

How do you fix a python path issue?

jwhughes58
Communicator

I have the splunk_app_db_connect installed and it works correctly until I install TA-Proofpoint-TAP. When The DB Connect UI is started it generates this error

<?xml version="1.0" encoding="UTF-8"?>
  <response>
    <messages>
      <msg type="WARN">Traceback (most recent call last): File "/splunk/cold/apps/splunk/bin/rest_handler.py",
        line 79, in <module> print splunk.rest.dispatch(**params) File "/splunk/cold/apps/splunk/lib/python2.7/site-packages/splunk/rest/__init__.py",
        line 149, in dispatch module = __import__('splunk.rest.external.%s' % parts[0], None, None, parts[0]) File "/splunk/cold/apps/splunk/etc/apps/splunk_app_db_connect/bin/dbxproxy.py"
        line 7, in <module> from dbx_settings import Settings File "/splunk/cold/apps/splunk/etc/apps/splunk_app_db_connect/bin/dbx_settings.py",
        line 10, in <module> import splunklib.client as client File "/splunk/cold/apps/splunk/etc/apps/TA-Proofpoint-TAP/bin/splunklib/__init__.py",
        line 18, in <module> from splunklib.six.moves import map ImportError: No module named six.moves </msg>
    </messages>
  </response>

If the TA isn't there, then the error isn't generated. From reading the message it appears that the splunklib is being picked up from the incorrect directory. I've tried putting a print in the dbx_settings.py to see what the path is before it reaches the import, but I've never found the output. Any ideas on how I can capture the path information so I can see why python is picking up the wrong splunklib.client?

TIA,
Joe

0 Karma
1 Solution

kheo_splunk
Splunk Employee
Splunk Employee

This issue has been fixed in DB Connect app version 3.1.4. Please see the reference for DBX-4623 in the following release note.

https://docs.splunk.com/Documentation/DBX/3.1.4/ReleaseNotes/Releasenotes

View solution in original post

0 Karma

kheo_splunk
Splunk Employee
Splunk Employee

This issue has been fixed in DB Connect app version 3.1.4. Please see the reference for DBX-4623 in the following release note.

https://docs.splunk.com/Documentation/DBX/3.1.4/ReleaseNotes/Releasenotes

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) v3.54.0

The Splunk Threat Research Team (STRT) recently released Enterprise Security Content Update (ESCU) v3.54.0 and ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...