I am trying to index data from my python script. Everything set up correctly but I still don't see data coming in. So search for events using index=internal sourcetype=splunkd and have the following error:
ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\system\bin\REVAPI_viewerreport.py"" ImportError: No module named splunklib.client.
I tried copying the package to the same folder where I have my script but it still giving me the same error. What should I do?
splunklib.client is part of the Splunk Python SDK.
Did you follow the guide for installation of the SDK (http://dev.splunk.com/view/python-sdk/SP-CAAAEDG)?
It seems like your PYTHONPATH environment variable is not set properly, causing import statement to fail.
Thanks for the answer. I placed the file splunk-sdk-python-1.6.3 in my C drive. Then I went to edit my eviromental variable for Path and wrote this line: PYTHONPATH=C:\splunk-sdk-python-1.6.3. But I still have the same error. Am I doing it right?
can you run
python -c 'import sys; print sys.path' and check if the SDK path appears in there?
I believe you need to restart your Windows machine for the new environment variable to appear.