Getting Data In

[AWS TA] Data being delayed after 5.0.3 upgrade.

sylim_splunk
Splunk Employee
Splunk Employee

We are seeing delay in indexing - this started to happen after the AWS TA 5.0.3 upgrade from 4.0.6.

In the TA log there are many ERROR messages which appears to be much relevant.

sylim_splunk_0-1611879747839.png

 

Labels (1)
Tags (1)
0 Karma
1 Solution

sylim_splunk
Splunk Employee
Splunk Employee

This is a code error triggered by an incompatible behavioral change since python 3.7.

Apply the following patch to fix this problem.

1. Open bin/splunk_ta_aws/modinputs/kinesis/aws_kinesis_common.py by any text editor.
2. Replace `raise StopIteration()` by `return`.

You should find three occurrence at the line 251, 258 and 273.

View solution in original post

sylim_splunk
Splunk Employee
Splunk Employee

This is a code error triggered by an incompatible behavioral change since python 3.7.

Apply the following patch to fix this problem.

1. Open bin/splunk_ta_aws/modinputs/kinesis/aws_kinesis_common.py by any text editor.
2. Replace `raise StopIteration()` by `return`.

You should find three occurrence at the line 251, 258 and 273.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...