All Apps and Add-ons

New TA-nix app - couldn't set locale correctly

cedarcrestone
Explorer

I have deployed the latest Splunk_TA_nix app to all of our Unix hosts and I am seeing an error when any of them attempt to run the scripts that came with it:

ERROR ExecProcessor - message from "/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/lastlog.sh" couldn't set locale correctly

It appears all of the scripts calls the file common.sh which has the following line:

LANG="en_US.UTF-8"

Any ideas on how to get rid of this error message?

g032067
New Member

The common.sh script needs to set the locale to LANG="en_US.UTF-8" You are most likely missing the locale on Solaris and it needs to be installed. Run the "locale -a" command to see the installed locales.

0 Karma

badarsebard
Communicator

Have you verified that the user running the splunkd process has the correct permission set to change the LANG variable? Also double check the scripts have the x permission set for the owner. I've run into this issue before. If common.sh isn't allowed to run (no x permission) then the lastlog.sh may fail when it calls on common.sh at the set locale line.

pwmcity
Path Finder

Any resolution?

0 Karma

araitz
Splunk Employee
Splunk Employee

What version of unix are you using?

0 Karma

Tonypic55
New Member

Same issue here and I'm using Solaris 10 SPARC.

0 Karma
Get Updates on the Splunk Community!

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...

New! Splunk Observability Search Enhancements for Splunk APM Services/Traces and ...

Regardless of where you are in Splunk Observability, you can search for relevant APM targets including service ...

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...