All Apps and Add-ons

TypeError when using

mikefg
Communicator

I am not using an api key, just free tier.

I get this error when used in search:

External search command 'ipextrainfo' returned error code 1. Script output = "error_message=TypeError at "/opt/splunk/etc/apps/ip_extrainfo/bin/ipextrainfo.py", line 47 : 'Message' object is not subscriptable ".

Labels (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @mikefg 

Despite this being usable without an API Key, it seems that the code is expecting an empty value for the API Key if you are using the free tier. I found the same issue as you when installing the app, to fix the issue I set the API key to a random value (e.g abc), then hit Save API Key.

Then once saved click the Reset API Key button.

livehybrid_0-1741794570335.png

 

After this the command works 🙂

Please let me know how you get on and consider adding karma to this or any other answer if it has helped.
Regards

Will

0 Karma

mikefg
Communicator

Getting a new error after trying your idea.

New error:
   Expecting value: line 1 column 1 (char 0)

my search string:
   index=network | ipextrainfo ip=src_ip | table src_ip country

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @mikefg 

Please can you run the below SPL and make sure if returns an empty string? 

| inputlookup ipapikey | sort - savetime | head 1 | table apikey

livehybrid_0-1741849087061.png

 

Please let me know how you get on and consider adding karma to this or any other answer if it has helped.
Regards

Will

0 Karma

mikefg
Communicator

Empty string.

splunk ipapikey.png

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Oh thats annoying - let me have another test to see what I can find.

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...