Dashboards & Visualizations

No data in app, Python exception: KeyError: 'server'

halr9000
Motivator

None of the app dashboards are populating. When searching "index=_internal Collect.py", I see the following error:

Traceback (most recent call last):
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_CiscoUCS\bin\Collect.py", line 53, in <module>
  managers = [m for m in DictReader(f) if fnmatch(m['server'], args.manager)]
KeyError: 'server'

Splunk version Splunk 6.0 (build 182037)

Platform Windows x64

Physical Memory (GB) 8.0

Number of CPU cores 8

$SPLUNK_HOME C:\Program Files\Splunk

(Asking this on behalf of a customer.)

0 Karma

halr9000
Motivator

The scripts throws when trying to parse managers.csv. This isn't a file not found/can't read error, so it's not permissions or filename type of issue, it's the content of the file. Perhaps the header is missing or altered? The sample included with the app looks like this:

server,realm
server1,production
server2,development
0 Karma

halr9000
Motivator

It's already parsed credentials by this point, so that file (credentials.csv) is ok

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Reuse: Word-play

This puzzle series (first published here) is based on analysing words.Some of the statements in your puzzle ...

Tuning Edge Processor in Hybrid Mode: What Limits Each Data Path

When you run Edge Processor in hybrid mode, alongside a Splunk heavy forwarder on the same host, two questions ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...