Hi,
I'm currently running Splunk Enterprise 6.4.3 on Windows 2012r2, almost everything running smoothly except EMC Isilon App & Add-On.
I'm currently trying to solve why I'm unable to get these apps working properly.
I have install both Application EMC Isilon Add-on for Splunk Enterprise & EMC Isilon App for Splunk Enterprise.
I have configure the Add-on, using IP of one Node of my Isilon Cluster and using Admin account. Configuration look simple and don't give any error message.
I did not see any sourcetype from EMC in Splunk, emc:isilon:rest or emc:isilon:syslog
I'm troubleshooting the problem using : index=_internal component="ExecProcessor" "EMC Isilon Error:" and here what I see:
message from "python "C:\Program Files\Splunk\etc\apps\TA_EMC-Isilon\bin\isilon.py"" EMC Isilon Error: Could not get TA_EMC-Isilon credentials from splunk. Error: 'str' object has no attribute 'os_startIndex'
message from "python "C:\Program Files\Splunk\etc\apps\TA_EMC-Isilon\bin\isilon.py"" EMC Isilon Error: Error while getting session validity for authentication. EMC Isilon Error: Could not get TA_EMC-Isilon credentials from splunk. Error: 'str' object has no attribute 'os_startIndex'
*message from "python "C:\Program Files\Splunk\etc\apps\TA_EMC-Isilon\bin\isilon.py"" EMC Isilon Error: Looks like an error while getting count for endpoint 401 Client Error: Authorization Required : https://xxx.xxx.xxx.xxx:8080/platform/1/statistics/current?key=node.sensor.fan.rpms.$get_count$&devi... *
These two errors message came back constently and not data from Isilon is in Splunk.
Thanks
Hi,
Few quick questions:
Have you upgraded your Isilon TA from 1.0 to 2.0 ?
Can you please check if file $SPLUNK_HOME/etc/apps/TA_EMC-Isilon/local/passwords.conf is created and contains the node information you have provided during setup?
IS there a last_session_call_info.pos file created (and not empty) at $SPLUNK_HOME/etc/apps/TA_EMC-Isilon/local/ directory ?
Thanks
Hi,
Thank you