Problem installing TA-uas_parser

[psbailey86]

I am attempting to get this TA working but am encountering errors when trying to update the cache via the update_cache.py script. My Splunk servers do not have internet access so I installed this TA locally on my windows 7 machine where I have splunk installed as well to test with. I am encountering errors any way I try this. Any help would be greatly appreciated here this is just what I have needed for a project I am working on.

Errors I am getting:

running the following command from the command prompt in windows:
c:\$Splunk_home\etc\apps\TA-uas_parser\bin $Splunk_home\bin\python.exe update_cache.py

Error:
ImportError: No module named site

When installing python and running the command I get this:

c:\python.exe update_cache.py

File "update_cache.py", line 6
print "Cache data updated."
SyntaxError: invalid syntax

I really need to get this addon working it would help us out a ton!
Thanks in advance!

[pmccomb]

I am having this same issue. Is there an update for a windows machine?

[dshpritz]

Hey pmccomb,

Sorry, I haven't had a Windows system to test on. I'll try to get to it soon.

Dave

[psbailey86]

Dave thanks for the response. I ended up installing this on a linux instance of Splunk and generated the cache file, and then copying it over to the other Splunk server. Not ideal but now it works and i was able to accomplish what I needed.

Thanks for the response.

[dshpritz]

Hello psbailey,

I'm Dave and TA-uas_parser is my fault.
I'm afraid I never tested the TA on a Windows install. I don't have a VM handy, but I can try to test it soon. As an alternative, you can also take a look at the TA-browscap addon, which performs a similar function, but uses a different library.

Thanks,

Dave