All Apps and Add-ons
Highlighted

Splunk Add-on for F5 BIG-IP: Why am I unable to initialize the modular input?

Engager

Search peer has the following message: Unable to initialize modular input "SplunkTAf5bigipmain" defined inside the app "SplunkTAf5-bigip": Unable to locate suitable script for introspection.

0 Karma
Highlighted

Re: Splunk Add-on for F5 BIG-IP: Why am I unable to initialize the modular input?

Engager

getting the above error when f5-bigip is loaded on to our index cluster peers.

0 Karma
Highlighted

Re: Splunk Add-on for F5 BIG-IP: Why am I unable to initialize the modular input?

Motivator

That error might because of wrong installation or configuration.

Check below link for hardware and software requirements.

http://docs.splunk.com/Documentation/AddOns/released/F5BIGIP/Hardwareandsoftwarerequirements

Hope this helps .

0 Karma
Highlighted

Re: Splunk Add-on for F5 BIG-IP: Why am I unable to initialize the modular input?

SplunkTrust
SplunkTrust

I work with Stan here and I was able to fix this by doing the following:

  • I removed the README/inputs.conf.spec filefor the app (since we were deploying on index clusters, there were no need for the inputs.conf on these servers).
  • I also commented out the stanza for the input in the default/log_info.conf .

After I pushed these changes to the IDX cluster, we stopped receiving the error message.

Highlighted

Re: Splunk Add-on for F5 BIG-IP: Why am I unable to initialize the modular input?

New Member

do u use Universal Forwarder to receive data from F5 ? based on syslog ?

then how you send them to indexers ?
is the TA working on indexers?

0 Karma
Highlighted

Re: Splunk Add-on for F5 BIG-IP: Why am I unable to initialize the modular input?

Path Finder

I have resovled this problem just only adding a comment for the stanza and attributes inside the config file inputs.conf.spec as showing below:

FILE => .../SplunkTAf5-bigip/README/inputs.conf.spec
# [SplunkTAf5bigipmain://]

# nothing=nothing

Then restart splunk.

0 Karma