All Apps and Add-ons

Machine Learning Toolkit: Why am I constantly getting python error "Operation not permitted" when trying to execute 'fit' command?

fkurbatov
Engager

Every time I try to run a linear prediction sample (for example "Predict VPN Usage") I get the following error:

Error in 'fit' command: [Errno 1] Operation not permitted: '/opt/splunk/etc/apps/Splunk_SA_Scientific_Python_linux_x86_64/bin/linux_x86_64/bin/python'

Detection of numeric outliners (which obviously doesn't need 'fit') works fine.

Here is what I get in mlspl.log:

1491518277.011762 2017-04-07 01:37:57,011 ERROR [mlspl] [die] [Errno 1] Operation not permitted: '/opt/splunk/etc/apps/Splunk_SA_Scientific_Python_linux_x86_64/bin/linux_x86_64/bin/python'
1491518277.014168 2017-04-07 01:37:57,014 ERROR [mlspl] [die] Traceback (most recent call last):
  File "/opt/splunk/etc/apps/Splunk_ML_Toolkit/bin/cexc/__init__.py", line 147, in run
    while self._handle_chunk():
  File "/opt/splunk/etc/apps/Splunk_ML_Toolkit/bin/cexc/__init__.py", line 272, in _handle_chunk
    ret = self.handler(metadata, body)
  File "/opt/splunk/etc/apps/Splunk_ML_Toolkit/bin/cexc/__init__.py", line 345, in handler
    raise RuntimeError(self.msg)
RuntimeError: [Errno 1] Operation not permitted: '/opt/splunk/etc/apps/Splunk_SA_Scientific_Python_linux_x86_64/bin/linux_x86_64/bin/python'

OS: Ubuntu 16.04.2 LTS x64
Splunk Version: 6.5.3
Splunk Build: 36937ad027d4

Please advice.

Thanks,
Fedor

0 Karma
1 Solution

grana_splunk
Splunk Employee
Splunk Employee

Hi ,

Can you please check if your app was installed by same user as splunk? Depending on how the app was installed, it can be messed up (e.g. it was installed by root but splunk runs as a separate user)

Thanks

View solution in original post

grana_splunk
Splunk Employee
Splunk Employee

Hi ,

Can you please check if your app was installed by same user as splunk? Depending on how the app was installed, it can be messed up (e.g. it was installed by root but splunk runs as a separate user)

Thanks

fkurbatov
Engager

That was exactly my case.

Thank you very much!

0 Karma
Get Updates on the Splunk Community!

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...