Getting Data In

Getting the error for rest handler "Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/" on the indexer

yashesh07
Engager

I have pushed the app through Cluster Master onto indexers. My app contains multiple custom rest endpoints. It needs to be installed on indexers. But when app pushed through aforementioned Cluster Master, it throws following error;


2019-03-26 18:40:06,056 +0530 ERROR \__init__:152 - The REST handler module "" could not be found. Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/
2019-03-26 18:40:06,056 ERROR No module named

I have exposed endpoints via restmap and web conf files and extended rest.BastRestHandler for all the endpoints.
I know that when app pushed through CM, it is stored in $SPLUNK_HOME/etc/slave-apps on the peers. But the splunkd logs seems to say that all rest handler python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/. Is it compulsory? Are there any ways around?
Also, can I run scripted input on indexers?

yashesh07
Engager

log message above is truncated, below is the correct one;

2019-03-26 18:40:06,056 +0530 ERROR _init_:152 - The REST handler module "" could not be found. Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/
2019-03-26 18:40:06,056 ERROR No module named

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...