subscription_modular_input.py error message in Splunk cloud gateway

[srichansen]

Hi all,

I am suddenly getting the following error in my Splunk cloud gateway app and can't see to correct it.

Unable to initialize modular input "subscription_modular_input" defined inside the app "splunk_app_cloudgateway": Introspecting scheme=subscription_modular_input: script running failed (exited with code 1).

Running the failed script above via Splunk cmd gives the following error. Looking for the missing libraries shows them all in their correct place.

/opt/splunk/bin/splunk cmd python /opt/splunk/etc/apps/splunk_app_cloudgateway/bin/subscription_modular_input.py Traceback (most recent call last):   File "/opt/splunk/etc/apps/splunk_app_cloudgateway/bin/subscription_modular_input.py", line 24, in <module>
    from spacebridgeapp.sodium_client import SodiumClient   File "/opt/splunk/etc/apps/splunk_app_cloudgateway/bin/spacebridgeapp/sodium_client/__init__.py", line 1, in <module>
    from sodium_client import SodiumClient   File "/opt/splunk/etc/apps/splunk_app_cloudgateway/bin/spacebridgeapp/sodium_client/sodium_client.py", line 10, in <module>
    from sodium import sodium_server_pb2 as sodium   File "/opt/splunk/etc/apps/splunk_app_cloudgateway/bin/spacebridgeapp/sodium_client/sodium/sodium_server_pb2.py", line 6, in <module>
    from google.protobuf.internal import enum_type_wrapper ImportError: No module named protobuf.internal

Can anyone steer me in the right direction to correct this,

thanks in advance
Simon

[Sridhar_bu]

Just update your proxy details in splunk-launch.conf and also in the $Splunk_Home\etc\apps\splunk_app_cloudgateway\local\cloudgateway.conf and then restart splunk.
This will take care of the error\issue.

Tested ..!!!

[srichansen]

Hi,

There were no changes in the system to do with cloud gateway. The only changes were within an app and should not affect the system files.

I should have added that i have tried re-installing, cleaning the app off the system and installing it again and
over installing Splunk again (update) to refresh the python2.7 files.

Somehow it seems that whatever has changed is not being undone by the updates or resets above.

regards,
Simon

[DavidHourani]

I'd say go for support 🙂

[srichansen]

I have worked out what the issue is with the cloud gateway.

If you install any other apps that use the google proto-buffer protocol, cloud gateway will stop working.

Removal of that app will get it working again.

Thanks for help all.
Kind regards,
Simon

[casingc_splunk]

It looks like one of the import libraries is missing. Can you try reinstalling the app?

[DavidHourani]

@srichansen, did you make any changes before getting this ? have a look here this could be a step in the right direction : https://docs.splunk.com/Documentation/Gateway/1.3.1/Registration/TroubleshootGateway or just go for support, it weird that this just drops...