Splunk Add-on for OPC UA Error REST 404 & Script error with code 127

[rafamss]

Hi dears,

I has installed the app Splunk Add-on for OPC UA in my lab but when I try configure the app, two errors occur:

• First: Unable to initialize modular input "mi_opcua_pull" defined inside the app "Splunk_TA_opcua": Introspecting scheme=mi_opcua_pull: script running failed (exited with code 127).

• Second: External handler failed with code '1' and output: 'REST ERROR[404]: Resource/Endpoint requested dose not exist - https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_opcua/data/inputs/mi_opcua_pull?output_mode=json&.... See splunkd.log for stderr output.

Has anyone ever seen this error?

Thanks!

[abalogh_splunk]

Hi,

Did you try to run ldd the mi_opcua_pull binary?

I got the same issue on a Red Hat 6.x, looks like mi_opcua_pull is linked to a newer glibc than I have at least. Maybe try it on Red Hat 7.x?

[splunk@splunk Splunk_TA_opcua]$ ldd ./linux_x86_64/bin/mi_opcua_pull
./linux_x86_64/bin/mi_opcua_pull: /lib64/libc.so.6: version GLIBC_2.17' not found (required by ./linux_x86_64/bin/mi_opcua_pull)
./linux_x86_64/bin/mi_opcua_pull: /lib64/libc.so.6: version GLIBC_2.14' not found (required by ./linux_x86_64/bin/mi_opcua_pull)

[jkat54]

Do you run your splunk management port on a different port from 8089?