Getting Data In

Getting the error for rest handler "Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/" on the indexer

yashesh07
Engager

I have pushed the app through Cluster Master onto indexers. My app contains multiple custom rest endpoints. It needs to be installed on indexers. But when app pushed through aforementioned Cluster Master, it throws following error;


2019-03-26 18:40:06,056 +0530 ERROR \__init__:152 - The REST handler module "" could not be found. Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/
2019-03-26 18:40:06,056 ERROR No module named

I have exposed endpoints via restmap and web conf files and extended rest.BastRestHandler for all the endpoints.
I know that when app pushed through CM, it is stored in $SPLUNK_HOME/etc/slave-apps on the peers. But the splunkd logs seems to say that all rest handler python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/. Is it compulsory? Are there any ways around?
Also, can I run scripted input on indexers?

yashesh07
Engager

log message above is truncated, below is the correct one;

2019-03-26 18:40:06,056 +0530 ERROR _init_:152 - The REST handler module "" could not be found. Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/
2019-03-26 18:40:06,056 ERROR No module named

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Get Agentic with Splunk Lantern: Connect to Cisco Cloud Control, Transform ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

July Community Events: Master ITSI 5.0 & Automate Splunk

Struggling with alert fatigue or feeling like you're spending more time on infrastructure maintenance than ...

New Release of Federated Search: Bringing Splunk Analytics to More of Your Data

Organizations today are generating more data than ever and storing it across cloud object stores, data lakes, ...