Getting Data In

Getting the error for rest handler "Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/" on the indexer

yashesh07
Engager

I have pushed the app through Cluster Master onto indexers. My app contains multiple custom rest endpoints. It needs to be installed on indexers. But when app pushed through aforementioned Cluster Master, it throws following error;


2019-03-26 18:40:06,056 +0530 ERROR \__init__:152 - The REST handler module "" could not be found. Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/
2019-03-26 18:40:06,056 ERROR No module named

I have exposed endpoints via restmap and web conf files and extended rest.BastRestHandler for all the endpoints.
I know that when app pushed through CM, it is stored in $SPLUNK_HOME/etc/slave-apps on the peers. But the splunkd logs seems to say that all rest handler python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/. Is it compulsory? Are there any ways around?
Also, can I run scripted input on indexers?

yashesh07
Engager

log message above is truncated, below is the correct one;

2019-03-26 18:40:06,056 +0530 ERROR _init_:152 - The REST handler module "" could not be found. Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/
2019-03-26 18:40:06,056 ERROR No module named

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Introducing ITSI 5.0: Unified Visibility and Actionable Insights

Introducing ITSI 5.0: Unified Visibility and Actionable Insights Tuesday, July 21, 2026  |  10:00AM PT / ...

Inside Splunk Agent Observability: Understanding Agent Behavior, Tokens & Costs

Inside Splunk Agent Observability:Understanding Agent Behavior, Tokens & Costs Thursday, August 06, ...

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...