Getting Data In

Unable to initialize modular input

hikari992
Explorer

Hi, I'm new to splunk. I'm getting this error "Unable to initialize modular input "LTA" defined inside the app "LTATest": Introspecting scheme=LTA: script running failed (exited with code 1)."
So, how should I solve this error?

anumeval
Engager

I am facing the same issue

" Unable to initialize modular input "testfile" defined inside the app "test1": Introspecting scheme=testfile: script running failed (exited with code 1)."

The modular input is developed using java . any hints on coming out of this problem is greatly appreciated .

Damien_Dallimor
Ultra Champion

Have a look in the splunkd logs for more error details :

You can use a search command like :

index=_internal error ExecProcessor source=*splunkd*

Damien_Dallimor
Ultra Champion

Here are some tips here for manually debugging a mod input :
http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/ModInputsDevTools

So you can manually execute the mod input(fill in the relevant values($STANZA_NAME ,$LTA_SCRIPT_NAME ) for your "ltatest" mod input) :

splunk cmd splunkd print-modinput-config LTA $STANZA_NAME | splunk cmd python $SPLUNK_HOME/etc/apps/LTATest/bin/$LTA_SCRIPT_NAME

hikari992
Explorer

What if it doesn't show any error?

0 Karma
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...