Splunk Dev

ImportError: No module named Site

po1splunk
New Member

I am trying out Splunk on Windows Server 2012, version 6.6.3 and attempting to do a scripted lookup with a python script. My actual script (makes HTTP call, returns json, I parse and return csv) works with my own installation of Python 2.7 but when I try to run it with the built-in Splunk version I get ImportError: No module named Site

I've searched and found a couple similar posts about this but what has me scratching my head is if I run "C:\Program Files\Splunk\bin\python.exe" test.py I get

ImportError: No module named Site 

Now, the only thing in test.py is the statement

print "hello"

If I run "C:\Program Files\Splunk\bin\python.exe" -S test.py I get the expected output

hello

This is a sanity test script of course, just to see if I can get it to do anything I'd expect. So what is going on with the -S (where I'm telling python to ignore site-packages I believe) vrs. not having that arg and I get an error?

Is there something wrong with my install? With a simple print statement I'd expect the built-in Python to work without issue but it does not.

Any ideas?? Thanks in advance for any input on this.

0 Karma
1 Solution

nickhills
Ultra Champion

If you want to run your script the way Splunk does (with its own libraries and modules) try this:

C:\Program Files\Splunk\bin\splunk cmd python ../path to/your script.py

I'm not suggesting this will solve your issue immediately, but under the covers that is how Splunk will execute your script.

If my comment helps, please give it a thumbs up!

View solution in original post

nickhills
Ultra Champion

If you want to run your script the way Splunk does (with its own libraries and modules) try this:

C:\Program Files\Splunk\bin\splunk cmd python ../path to/your script.py

I'm not suggesting this will solve your issue immediately, but under the covers that is how Splunk will execute your script.

If my comment helps, please give it a thumbs up!

po1splunk
New Member

Ah, subtle difference. This runs the script as intended. Thank you for this help!!

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...