All Apps and Add-ons

*NIX app has stopped working

smcneilly
Engager

Updated to 4.1.1.Build 78281. Trying to use *NIX app, which tells me that it is not "fully configured yet." I continue to app setup page, but when I try to save configuration, it fails with this message: "Encountered the following error while trying to update: In handler 'localapps': Error performing action=edit on object id=script://$SPLUNK_HOME/etc/apps/unix/bin/cpu.sh in config=inputs." How do I configure *NIX app? (Or, How do I correct this error?)

smcneilly
Engager

Problem was that C:\Program Files\Splunk\etc\apps\unix\local\inputs.conf was "read only". No idea how it got that way. The error message: "In handler 'localapps': Error performing action=edit on object id=script://$SPLUNK_HOME/etc/apps/unix/bin/cpu.sh in config=inputs." was not specific. There are at least 13 files with "inputs" in the name in the Splunk directory tree. Thanks to Michael Wilde for finding the solution.

jrodman
Splunk Employee
Splunk Employee

I assume you're logged in as admin? You may want to check etc/apps/unix/metadata/local.meta to see if you've modified the access to components of this application (the app does not ship with such a file). You could also review the inputs for the app in manager to see if you have permission to 'write' to them, ie reconfigure them.

The presumption is that whoever is configuring this app can change the run status of the inputs.

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...