All Apps and Add-ons
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question

IBM MQ modular input script error

charanramireddy
New Member
‎03-29-2019 08:08 AM

Hello,

I'm using the IBM modular input for splunk to monitor my queues and channels. I can see the results for channels with no issues but for queues, I'm seeing error "GOT EOF" for the mqinput.py script. See below.

03-29-2019 11:01:47.998 -0400 DEBUG ExecProcessor - cmd='python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py' Not added to run queue
03-29-2019 11:01:47.998 -0400 DEBUG ExecProcessor - PipelineSet 0: Destroying ExecedCommandPipe for "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" id=17
03-29-2019 11:01:47.998 -0400 DEBUG ExecProcessor - PipelineSet 0: Ran script: python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py, took 0.100946 seconds to run, 0 bytes read 0 events read
03-29-2019 11:01:47.988 -0400 DEBUG ExecProcessor - PipelineSet 0: Got EOF from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py", uniqueId=17
03-29-2019 11:01:47.981 -0400 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" default queue handler _init_
03-29-2019 11:01:47.979 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" Using response_handler:DefaultQueueResponseHandler
03-29-2019 11:01:47.979 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'use_mq_triggering' -> '0'
03-29-2019 11:01:47.979 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'use_mq_triggering'
03-29-2019 11:01:47.979 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'start_process_per_queue' -> '1'
03-29-2019 11:01:47.979 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'start_process_per_queue'
03-29-2019 11:01:47.979 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'start_number_of_processes' -> '2'
03-29-2019 11:01:47.979 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'start_number_of_processes'
03-29-2019 11:01:47.979 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'start_multiple_processes' -> '1'
03-29-2019 11:01:47.979 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'start_multiple_processes'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'sourcetype' -> 'mqinput'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'sourcetype'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'server_connection_channel' -> 'MQREAD.SVRCONN'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'server_connection_channel'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'response_handler_args' -> 'pretty_mqmd=true,encode_payload=false'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'response_handler_args'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'queue_names'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'queue_manager_name' -> 'OMSDV'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'queue_manager_name'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'queue_manager_host' -> 'suunxmqmsb002'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'queue_manager_host'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'port' -> '1415'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'port'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'persistent_connection' -> '1'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'persistent_connection'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'mqinput_interval' -> '30'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'mqinput_interval'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'index' -> 'main'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'index'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'host' -> 'hostA'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'host'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: 'disabled' -> '0'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found param 'disabled'
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found stanza mqinput://q-test
03-29-2019 11:01:47.978 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" XML: found configuration
03-29-2019 11:01:47.977 -0400 DEBUG ExecProcessor - message from "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" ... MQINPUT: do_run() ...
03-29-2019 11:01:47.897 -0400 DEBUG ExecProcessor - PipelineSet 0: Created new ExecedCommandPipe for "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py", uniqueId=17
03-29-2019 11:01:47.897 -0400 DEBUG ExecProcessor - Running: python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py on PipelineSet 0
03-29-2019 11:01:47.897 -0400 DEBUG ExecProcessor - Done configuring ExecedCommand: command='python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py' runViaShell=1 tickStarted=0 running=0 state=WAITING_ON_RUNQUEUE interval=18446744073709551.615
03-29-2019 11:01:47.896 -0400 DEBUG ExecProcessor - Creating InputStatusHandler for group="modular input commands" key="/opt/splunk/etc/apps/mq_ta/bin/mqinput.py (mqinput://q-test)"
03-29-2019 11:01:47.896 -0400 INFO  ExecProcessor - New scheduled exec process: python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py
03-29-2019 11:01:47.896 -0400 DEBUG ExecProcessor - cmd='python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py' Added to run queue
03-29-2019 11:01:47.896 -0400 DEBUG ExecProcessor - adding "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py" to runqueue
03-29-2019 11:01:47.896 -0400 DEBUG ExecProcessor - ExecProcessorSharedState::addToRunQueue() path='python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py' restartTimerIfNeeded=0
03-29-2019 11:01:47.896 -0400 DEBUG ExecProcessor - Creating an ExecedCommand, cmd='python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py', args={python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py}, runViaShell=true
03-29-2019 11:01:47.896 -0400 DEBUG ExecProcessor - stanza=script:///opt/splunk/etc/apps/mq_ta/bin/mqinput.py (mqinput://q-test) interval=18446744073709551.615
03-29-2019 11:01:47.896 -0400 DEBUG ExecProcessor - After normalization script is "python /opt/splunk/etc/apps/mq_ta/bin/mqinput.py"
03-29-2019 11:01:47.896 -0400 DEBUG ExecProcessor - Stanza='script:///opt/splunk/etc/apps/mq_ta/bin/mqinput.py (mqinput://q-test)' isModInput=true isIntrospectionInput=false
03-29-2019 11:01:47.896 -0400 DEBUG ExecProcessor - In configure(), looking at stanza: [script:///opt/splunk/etc/apps/mq_ta/bin/mqinput.py (mqinput://q-test)] -> {host -> hostA, index -> main, source -> mqinput://q-test, sourcetype -> mqinput}
03-29-2019 11:01:47.896 -0400 DEBUG ExecProcessor - Found 1 runnable stanzas for scheme=mqinput
03-29-2019 11:01:47.894 -0400 DEBUG ExecProcessor - Disabled input script for stanza "q-test" for "mqinput".  Skipping.
03-29-2019 11:01:47.894 -0400 DEBUG ExecProcessor - Found 1 runnable stanzas for scheme=mqinput

What could be wrong with the configuration ?

0 Karma
Reply
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...