I am configuring the Splunk Add-on for Cisco Identity Services. When I Quarantine the IP address, it should invoke the python (pxgremediate.py) script, but after that, it's showing me an error as:
External search command 'pxgremediate' returned error code 1. Script output = "ERROR [Errno 13] Permission denied"
All sort of permissions have been granted to the the script. Also when i am trying in my local, it's giving me invalid or corrupt jar.
invalid or corrupt jar
Hi, there was a corrupt jar in 2.1.1 -- 2.1.2 fixes it.
View solution in original post
I checked the pxgremediate.log file . I found the issue
Exception Detail: [Errno 13] Permission denied
Traceback: Traceback (most recent call last):
File "/apps/splunk/etc/apps/Splunk_TA_cisco-ise/bin/pxgremediate.py", line 131, in pxgremediate
java_result = subprocess.Popen(java_cmd, stderr=subprocess.STDOUT, stdout=subprocess.PIPE)
File "/apps/splunk/lib/python2.7/subprocess.py", line 711, in __init__
File "/apps/splunk/lib/python2.7/subprocess.py", line 1308, in _execute_child
OSError: [Errno 13] Permission denied
Not sure even but still figuring it out .
When python invokes the pxgremediate.py script it requires the executable java class which requires the java installed in the machine . My problem is permission to java is not there .