Why is Machine Learning Toolkit and Showcase 0.9.1 on Splunk 6.3 complaining the Python for Scientific Computing (for Windows 64-bit) is not installed, but it is?

[bradj013]

Splunk_ML_Toolkit 0.9.1 complains that Python for Scientific Computing is not installed (even after restart). App Splunk_SA_Scientific_Python_windows_x86_64 1.0.0 is installed and shows up in the application list on the manage applications screen. Can someone advise how to troubleshoot?

[ssreshta_splunk]

If you encounter this problem, please install the newest version of the app(1.0.1) which bundles MSVCRT90.DLL.
https://splunkbase.splunk.com/app/2883/

[bradj013 · Accepted solution]

The scientific flavor of python (on Windows) requires Microsoft Visual C++ 2008 runtime to be installed. After installing vcredest_x64.exe, ML toolkit started working. Problem solved!

[bradj013]

Flagging the Python... app as visible was tried, but this did not fix the problem.

[jleverich_splun]

Hi brad! Sorry you are having trouble here. Could you check a couple of things for me?

First, can you confirm that your Splunk search head is running version at least 6.3.0 and running on 64-bit Windows? (and not, e.g. 32-bit Windows 7).

Second, could you go to the "Search" tab in the ML Toolkit and Showcase app and try running the following two searches and report back the output?

| fit

and

| listmodels

Best regards, -jacob

[bradj013]

Jacob,

The environment in question is a single instance with the search head and indexer on the same server. If I issue splunk version the response back is "Splunk 6.3.0 (build aa7d4b1ccb80)". The host operating system is Windows 2008R2 Enterprise (x64). | fit returns "fit: Failed to load Splunk_SA_Scientific_Python (Python for Scientific Computing App) ". | listmodels returns "No results found."

Thanks,
John

[jleverich_splun]

Great, thanks for trying these two things!

I'm suspecting that the Python for Scientific Computing app didn't install correctly. There are a couple of ways to test this:

(1) Delete %SPLUNK_HOME%\etc\apps\Splunk_SA_Scientific_Python and all of its contents, restart Splunk, and then try to reinstall it.
(2) Open cmd.exe, and run:
cd %SPLUNK_HOME%\etc\apps\Splunk_SA_Scientific_Python_windows_x86_64\bin\windows_x86_64
python.exe
import sys, pandas
sys.exit()

If (1) fixes it, then indeed something went wrong when installing Python for Scientific Computing. If (2) doesn't raise any errors, then Python for Scientific Python is probably installed correctly, and there is likely a bug in the "fit" command that we'll need to track down.

Best regards,
-jacob

[bradj013]

Jacob,

Suggestion 1 did nothing. I attempted suggestion two and found that python fails to start. It generated this error in the application event log:

Activation context generation failed for "C:\Program Files\Splunk\etc\apps\Splunk_SA_Scientific_Python_windows_x86_64\bin\windows_x86_64\python.exe". Dependent Assembly Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" could not be found. Please use sxstrace.exe for detailed diagnosis.

John

[jleverich_splun]

John, super helpful. Thanks so much for going the extra distance to help diagnose this! I'm glad you found a workaround. Cheers, -jacob