All Apps and Add-ons

*NIX app has stopped working

smcneilly
Engager

Updated to 4.1.1.Build 78281. Trying to use *NIX app, which tells me that it is not "fully configured yet." I continue to app setup page, but when I try to save configuration, it fails with this message: "Encountered the following error while trying to update: In handler 'localapps': Error performing action=edit on object id=script://$SPLUNK_HOME/etc/apps/unix/bin/cpu.sh in config=inputs." How do I configure *NIX app? (Or, How do I correct this error?)

smcneilly
Engager

Problem was that C:\Program Files\Splunk\etc\apps\unix\local\inputs.conf was "read only". No idea how it got that way. The error message: "In handler 'localapps': Error performing action=edit on object id=script://$SPLUNK_HOME/etc/apps/unix/bin/cpu.sh in config=inputs." was not specific. There are at least 13 files with "inputs" in the name in the Splunk directory tree. Thanks to Michael Wilde for finding the solution.

jrodman
Splunk Employee
Splunk Employee

I assume you're logged in as admin? You may want to check etc/apps/unix/metadata/local.meta to see if you've modified the access to components of this application (the app does not ship with such a file). You could also review the inputs for the app in manager to see if you have permission to 'write' to them, ie reconfigure them.

The presumption is that whoever is configuring this app can change the run status of the inputs.

0 Karma
Get Updates on the Splunk Community!

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...

Federated Search for Amazon S3 | Key Use Cases to Streamline Compliance Workflows

Modern business operations are supported by data compliance. As regulations evolve, organizations must ...