All Apps and Add-ons

python errors in splunkd./log for splunk app for netapp (with solution)

chadfermanxto
Explorer

We are running the splunk app for netapp on a variety of filers in our environment and receiving the following python errors:

03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py" Exception in thread MYFILERNAME:
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py" Traceback (most recent call last):
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"   File "/opt/splunk/lib/python2.7/threading.py", line 551, in __bootstrap_inner
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"     self.run()
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"   File "/opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap_Pak/SNap_Threads.py", line 57, in run
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"     na_stats(server, self, fp, c, typ, lst)
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"   File "/opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap_Pak/SNap_Threads.py", line 89, in na_stats
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"     buf = na_stats_x2(server, thread, fp, counter, typ, lst)
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"   File "/opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap_Pak/SNap_Threads.py", line 68, in na_stats_x2
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"     results = server.invoke('perf-object-get-instances', {'objectname': counter})
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"   File "/opt/splunk/etc/apps/SplunkAppforNetApp/bin/ontapi/NaServer.py", line 316, in invoke
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"     return self.invokeElem(element)
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"   File "/opt/splunk/etc/apps/SplunkAppforNetApp/bin/ontapi/NaServer.py", line 264, in invokeElem
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"     raw_results = urllib2.urlopen(request)
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"   File "/opt/splunk/lib/python2.7/urllib2.py", line 126, in urlopen
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"     return _opener.open(url, data, timeout)
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"   File "/opt/splunk/lib/python2.7/urllib2.py", line 400, in open
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"     response = self._open(req, data)
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"   File "/opt/splunk/lib/python2.7/urllib2.py", line 418, in _open
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"     '_open', req)
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"   File "/opt/splunk/lib/python2.7/urllib2.py", line 378, in _call_chain
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"     result = func(*args)
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"   File "/opt/splunk/lib/python2.7/urllib2.py", line 1215, in https_open
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"     return self.do_open(httplib.HTTPSConnection, req)
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"   File "/opt/splunk/lib/python2.7/urllib2.py", line 1177, in do_open
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py"     raise URLError(err)
03-26-2013 08:23:46.631 -0500 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SplunkAppforNetApp/bin/SNap.py" URLError: <urlopen error [Errno 111] Connection refused>
1 Solution

halr9000
Motivator

I'm editing the question and putting @chadfermanxto 's answer here so that the question appears as answered.

"After digging ito this and running each piece in verbose mode I found that it was looking for 2 libraries that on RHEL 6.4 are named weird. There are:
libssl.so.0.9.8e
libcrypto.so.0.9.8e
I created sylinks to these files and errors went away. "

View solution in original post

0 Karma

halr9000
Motivator

I'm editing the question and putting @chadfermanxto 's answer here so that the question appears as answered.

"After digging ito this and running each piece in verbose mode I found that it was looking for 2 libraries that on RHEL 6.4 are named weird. There are:
libssl.so.0.9.8e
libcrypto.so.0.9.8e
I created sylinks to these files and errors went away. "

0 Karma

halr9000
Motivator

Wow, you brought a question and an answer! Thanks! I had seen this in some cases but had not yet delved into it. Thanks! I'll validate what you've done and see if I can work around the issue in the first place.

P.S. you may as well do some cut & paste and post your answer as an "answer", and get the karma benefit.

0 Karma
Get Updates on the Splunk Community!

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through:An introduction to the Splunk Threat ...

Splunk Life | Happy Pride Month!

Happy Pride Month, Splunk Community! &#x1f308; In the United States, as well as many countries around the ...

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...