Developing for Splunk Enterprise

Getting configuration errors when installing modular input on heavy forwarder.

Path Finder

Hello,

I am trying to install a modular input.
On a standalone Splunk, there is no problem, the setup dashboard shows up perfectly.

But on a heavy forwarder I get the following error on the graphical interface of Splunk:

Unable to initialize modular input "gmailbigquery" defined inside the app "TAAINR1R93gmailHF": Introspecting scheme=gmail_bigquery: script running failed (exited with code 1).

And in the _internal index:

05-13-2019 15:21:53.237 +0200 ERROR
AdminManagerExternal - Stack trace
from python handler:\nTraceback (most
recent call last): \n File
"/opt/splunk/lib/python2.7/site-packages/splunk/admin.py",
line 130, in init\n
hand.execute(info)\n File
"/opt/splunk/lib/python2.7/site-packages/splunk/admin.py",
line 594, in execute\n if
self.requestedAction == ACTIONLIST:

self.handleList(confInfo)\n File
"/opt/splunk/etc/apps/TAAINR1R93gmailHF/bin/taainr1r93gmailhf/splunkaoblib/restmigration.py"spl
, line 38, in handleList\n

AdminExternalHandler.handleList(self,
confInfo)\n File
"/opt/splunk/etc/apps/TAAINR1R93gmailHF/bin/taainr1r93gmailhf/splunktaucclib/resthandler/adminexternal.py",
line 40, in wrapper\n for entity in
result:\n File
"/opt/splunk/etc/apps/TAAINR1R93gmailHF/bin/taainr1r93gmailhf/splunktaucclib/resthandler/handler.py",
line 118, in wrapper\n raise
RestError(exc.status,
exc.message)\nRestError: REST Error
[404]: Not Found -- HTTP 404 Not Found
-- {"messages":[{"type":"ERROR","text":"Not
Found"}]}\n

It seems that something is missing in the configuration but I do not find what it could be.

Cheers,
Céline

Labels (2)
0 Karma

Path Finder

Finally,
I use the command to debug the modular input:
./splunk cmd splunkd print-modinput-config --debug gmail .

This gave an other error message (different from what was logged into the _internals.

And I could correct this new error and then solved the issue