Getting Data In

How to solve this error: The system cannot find the file specified in splunkd log of splunk universal forwarder

varshini_97
Path Finder

Hi,

I am trying to run a python script on my universal forwarder which send data to splunk cloud instance. I have added the path in inputs.conf and there is not events found in my index.

While checking on splunkd logs, there shows a error "The system cannot find the file specified".

what could be the problem?

Labels (2)
0 Karma
1 Solution

varshini_97
Path Finder

Hi @gcusello ,

The issue is fixed now.

The forwarder was searching for python3.exe where i have python.exe in my splunkuniversalforwarder folder. So it couldn't find the file. 

The issue is fixed as I renamed the file name.

Thanks for ur solutions @gcusello 

View solution in original post

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @varshini_97,

I suppose that you already checked the filename and the path.

Did you checked also if the user you're using to run the script has the grants on that file and folder?

Ciao.

Giuseppe

0 Karma

varshini_97
Path Finder

Hi @gcusello ,

I have checked the filename and path.

Regarding the grants for the file, I am unable to add my splunk user in the security tab of Access window.

 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @varshini_97,

as you can suppose, the user used to launch the script must have the execution grants.

Try to execute it using the same user and see if you still have the issue.

Ciao.

Giuseppe

0 Karma

varshini_97
Path Finder

Hi @gcusello ,

The issue is fixed now.

The forwarder was searching for python3.exe where i have python.exe in my splunkuniversalforwarder folder. So it couldn't find the file. 

The issue is fixed as I renamed the file name.

Thanks for ur solutions @gcusello 

0 Karma

jdtcabanglan
Loves-to-Learn

Hi Can you share what file did you rename to fix the issue. I'm also getting the same issue.

 

Thank you

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @varshini_97,

good for you, see next time!

Please accept one answer for the other people of Community

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...