Getting Data In

Getting the error for rest handler "Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/" on the indexer

yashesh07
Engager

I have pushed the app through Cluster Master onto indexers. My app contains multiple custom rest endpoints. It needs to be installed on indexers. But when app pushed through aforementioned Cluster Master, it throws following error;


2019-03-26 18:40:06,056 +0530 ERROR \__init__:152 - The REST handler module "" could not be found. Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/
2019-03-26 18:40:06,056 ERROR No module named

I have exposed endpoints via restmap and web conf files and extended rest.BastRestHandler for all the endpoints.
I know that when app pushed through CM, it is stored in $SPLUNK_HOME/etc/slave-apps on the peers. But the splunkd logs seems to say that all rest handler python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/. Is it compulsory? Are there any ways around?
Also, can I run scripted input on indexers?

yashesh07
Engager

log message above is truncated, below is the correct one;

2019-03-26 18:40:06,056 +0530 ERROR _init_:152 - The REST handler module "" could not be found. Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/
2019-03-26 18:40:06,056 ERROR No module named

0 Karma
Get Updates on the Splunk Community!

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...