Deployment Architecture

Splunk Web not accessible

abhijitnath89ax
Loves-to-Learn

We are not able to access splunk web, receiving below error in web_service.log, please let me know if any one has an idea

2020-04-20 10:12:59,669 ERROR [5e9d75ab947f40c9ad4f10] root:769 - Unable to start splunkweb
2020-04-20 10:12:59,669 ERROR [5e9d75ab947f40c9ad4f10] root:770 - No module named 'UserDict'
Traceback (most recent call last):
File "/opt/splunk/lib/python3.7/site-packages/splunk/appserver/mrsparkle/root.py", line 132, in
from splunk.appserver.mrsparkle.controllers.top import TopController
File "/opt/splunk/lib/python3.7/site-packages/splunk/appserver/mrsparkle/controllers/top.py", line 27, in
from splunk.appserver.mrsparkle.controllers.admin import AdminController
File "/opt/splunk/lib/python3.7/site-packages/splunk/appserver/mrsparkle/controllers/admin.py", line 25, in
from splunk.appserver.mrsparkle.controllers.appinstall import AppInstallController
File "/opt/splunk/lib/python3.7/site-packages/splunk/appserver/mrsparkle/controllers/appinstall.py", line 22, in
from splunk.appserver.mrsparkle.lib import module
File "/opt/splunk/lib/python3.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 465, in
moduleMapper = ModuleMapper()
File "/opt/splunk/lib/python3.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 83, in init
self.installedModules = self.getInstalledModules()
File "/opt/splunk/lib/python3.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 28, in helper
return f(*a, **kw)
File "/opt/splunk/lib/python3.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 448, in getInstalledModules
mods = self.getModuleList(root)
File "/opt/splunk/lib/python3.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 37, in helper
return f(*a, **kw)
File "/opt/splunk/lib/python3.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 223, in getModuleList
mod = import(modname)
File "/opt/splunk/etc/apps/SA-VMNetAppUtils/appserver/modules/SOLNTreeNav/SOLNTreeNav.py", line 5, in
import UserDict
ModuleNotFoundError: No module named 'UserDict'

0 Karma
1 Solution

PavelP
Motivator

Hello @abhijitnath89axa ,

the error indicates a missing python module UserDict which required by the App SA-VMNetAppUtils

edit the file /opt/splunk/etc/apps/SA-VMNetAppUtils/local/apps.conf and change state = enabled to state = disabled. If there is no such file try /opt/splunk/etc/apps/SA-VMNetAppUtils/default/apps.conf

After that try to start Splunk.

Let me know how it went.

View solution in original post

0 Karma

PavelP
Motivator

Hello @abhijitnath89axa ,

the error indicates a missing python module UserDict which required by the App SA-VMNetAppUtils

edit the file /opt/splunk/etc/apps/SA-VMNetAppUtils/local/apps.conf and change state = enabled to state = disabled. If there is no such file try /opt/splunk/etc/apps/SA-VMNetAppUtils/default/apps.conf

After that try to start Splunk.

Let me know how it went.

0 Karma

abhijitnath89ax
Loves-to-Learn

We also had to disable the Vmware app

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Contact Splunk Support.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...