All Apps and Add-ons

New TA-nix app - couldn't set locale correctly

cedarcrestone
Explorer

I have deployed the latest Splunk_TA_nix app to all of our Unix hosts and I am seeing an error when any of them attempt to run the scripts that came with it:

ERROR ExecProcessor - message from "/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/lastlog.sh" couldn't set locale correctly

It appears all of the scripts calls the file common.sh which has the following line:

LANG="en_US.UTF-8"

Any ideas on how to get rid of this error message?

g032067
New Member

The common.sh script needs to set the locale to LANG="en_US.UTF-8" You are most likely missing the locale on Solaris and it needs to be installed. Run the "locale -a" command to see the installed locales.

0 Karma

badarsebard
Communicator

Have you verified that the user running the splunkd process has the correct permission set to change the LANG variable? Also double check the scripts have the x permission set for the owner. I've run into this issue before. If common.sh isn't allowed to run (no x permission) then the lastlog.sh may fail when it calls on common.sh at the set locale line.

pwmcity
Path Finder

Any resolution?

0 Karma

araitz
Splunk Employee
Splunk Employee

What version of unix are you using?

0 Karma

Tonypic55
New Member

Same issue here and I'm using Solaris 10 SPARC.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...