Unable to initialize modular input "checkpoint_opseclea" defined inside the app "Splunk_TA_checkpoint-opseclea": Unable to locate suitable script for introspection.

[hatalla]

I installed Splunk_TA_checkpoint-opseclea but I am seeing the error on the question line generated on the search peers. Things I did in an attempt to get rid of this error:

• Renamed /Splunk_TA_checkpoint-opseclea/default/inputs.conf to /Splunk_TA_checkpoint-opseclea/default/inputs.conf.org
• Renamed all .conf.spec files in /Splunk_TA_checkpoint-opseclea/README/ to conf.spec.org

and I am still seeing the error. Not sure what is the cause of this.

Thanks.

Hani

[rath]

Hey I m facing the same issue and when I am appending a .org to the spec file and restarting splunk another spec file with original name is automatically being created.
Can anybody help on how to disable the spec file permanently.

[richgalloway]

@rath, This question is two years old with an accepted answer. If the solution does not work for you then you should post a new question.

[hatalla · Accepted solution]

Case anyone is inquiring about this issue, it turns out we need to rename/remove ALL .spec files in Splunk_TA_checkpoint-opseclea/README/ and not just inputs.conf.spec So appended a ".org" to these files:

inputs.conf.spec
opseclea_connection.conf.spec
opseclea_inputs.conf.spec
opseclea_settings.conf.spec