Why is the fit command resulting in error "Failed to find Python for Scientific Computing Add-on..."?

[burwell]

On either Splunk 6.4.3 or Splunk 6.5, I have both the latest Machine Learning Toolkit 2.0 and Scientific Python 1.2.

The apps are enabled, I am admin, the permissions are good.

Splunk search that fails:

index=main  | fit

Error:

Error in 'fit' command: Failed to find Python for Scientific Computing Add-on (Splunk_SA_Scientific_Python_linux_x86_64)

splunkd.log says:

10-11-2016 18:58:56.806 +0000 ERROR ChunkedExternProcessor - stderr: Traceback (most recent call last):
10-11-2016 18:58:56.806 +0000 ERROR ChunkedExternProcessor - stderr:   File "/opt/splunk/etc/apps/Splunk_ML_Toolkit/bin/cexc/__init__.py", line 127, in run
10-11-2016 18:58:56.806 +0000 ERROR ChunkedExternProcessor - stderr:     while self._handle_chunk():
10-11-2016 18:58:56.806 +0000 ERROR ChunkedExternProcessor - stderr:   File "/opt/splunk/etc/apps/Splunk_ML_Toolkit/bin/cexc/__init__.py", line 254, in _handle_chunk
10-11-2016 18:58:56.806 +0000 ERROR ChunkedExternProcessor - stderr:     ret = self.handler(metadata, body)
10-11-2016 18:58:56.806 +0000 ERROR ChunkedExternProcessor - stderr:   File "/opt/splunk/etc/apps/Splunk_ML_Toolkit/bin/cexc/__init__.py", line 326, in handler
10-11-2016 18:58:56.806 +0000 ERROR ChunkedExternProcessor - stderr:     raise RuntimeError(self.msg)
10-11-2016 18:58:56.806 +0000 ERROR ChunkedExternProcessor - stderr: RuntimeError: Failed to find Python for Scientific Computing Add-on (Splunk_SA_Scientific_Python_linux_x86_64)
10-11-2016 18:58:56.806 +0000 ERROR ChunkedExternProcessor - Error in 'fit' command: Failed to find Python for Scientific Computing Add-on (Splunk_SA_Scientific_Python_linux_x86_64)

[yangzd · Accepted solution]

The error message indicates the Python for Scientific Computing Add-on is not installed properly.

Can you double check the app installation, specifically:

1. It is the right PSC bits on your platform, that is Linux-64bit in your environment.
2. PSC is installed to $SPLUNK_HOME/etc/apps/, and has unchanged name, that is "Splunk_SA_Scientific_Python_linux_x86_64" in your environment.

You may need to reinstall PSC and restart Splunk.

[yew]

How do I install reinstall this add-on within a cloud instance?

[DanielPi]

Hi @yew,

I’m a Community Moderator in the Splunk Community.

This question was posted 8 years ago, so it might not get the attention you need for your question to be answered. We recommend that you post a new question so that your issue can get the  visibility it deserves. To increase your chances of getting help from the community, follow these guidelines in the Splunk Answers User Manual when creating your post.

Thank you! 

[yew]

It's okay. I was able to figure out how to install this. It's a bit odd that dependencies like this are not automatically managed.

[burwell]

Thanks! Yes we have 64 bit Linux but I had called the app dir Splunk_SA_Scientific_Python_linux and not Splunk_SA_Scientific_Python_linux_x86_64.

I renamed the dir to the correct _x86_64, restarted Splunk and the error went away.

Thanks yangzd!

[amitsharma39]

I'm facing the same error. Also in my case, the name of the folder is correct as mentioned above. Using MLT 3.0 & PSC 1.2. Have done uninstall and splunk restart several times - no help.

[thambisetty]

Error in 'fit' command: External search command exited unexpectedly. getting same error.

[fsaporito]

me too and the name is correct.

[yangzd]

Awesome. You are very welcome!