Getting Data In

Getting the error for rest handler "Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/" on the indexer

yashesh07
Engager

I have pushed the app through Cluster Master onto indexers. My app contains multiple custom rest endpoints. It needs to be installed on indexers. But when app pushed through aforementioned Cluster Master, it throws following error;


2019-03-26 18:40:06,056 +0530 ERROR \__init__:152 - The REST handler module "" could not be found. Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/
2019-03-26 18:40:06,056 ERROR No module named

I have exposed endpoints via restmap and web conf files and extended rest.BastRestHandler for all the endpoints.
I know that when app pushed through CM, it is stored in $SPLUNK_HOME/etc/slave-apps on the peers. But the splunkd logs seems to say that all rest handler python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/. Is it compulsory? Are there any ways around?
Also, can I run scripted input on indexers?

yashesh07
Engager

log message above is truncated, below is the correct one;

2019-03-26 18:40:06,056 +0530 ERROR _init_:152 - The REST handler module "" could not be found. Python files must be in $SPLUNK_HOME/etc/apps/$MY_APP/bin/
2019-03-26 18:40:06,056 ERROR No module named

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...