Installation

Error while installing Splunk Enterprise security

Prakhar_shukla
Path Finder

i have installed the ES app in one of the splunk instance and i am getting the following error message in web-

Unable to initialize modular input "ess_content_importer" defined inside the app "SplunkEnterpriseSecuritySuite": Introspecting scheme=ess_content_importer: script running failed (exited with code 1).

please help out to fix the issue.

Tags (1)
1 Solution

Prakhar_shukla
Path Finder

it seems the errors are coming due to compatibility mismatch between splunk enterprise version and Enterprise security apps version that i have installed.

View solution in original post

0 Karma

alekszubr
Engager

I installed Splunk Enterprise with sale trial licence. After I installed Enterprise Security and take error: Unable to initialize modular input "ess_content_importer" defined inside the app "SplunkEnterpriseSecuritySuite": Introspecting scheme=ess_content_importer: script running failed (exited with code 1).

0 Karma

richgalloway
SplunkTrust
SplunkTrust

@alekszubr, You're adding on to a year-old thread that has an accepted answer. For better chances at a helpful response, please post a new question describing your problem.

---
If this reply helps you, Karma would be appreciated.

Prakhar_shukla
Path Finder

it seems the errors are coming due to compatibility mismatch between splunk enterprise version and Enterprise security apps version that i have installed.

0 Karma

Prakhar_shukla
Path Finder

Error in log-

04-20-2017 12:16:27.454 +0200 ERROR ModularInputs - Introspecting scheme=app_permissions_manager: script running failed (exited with code 1).
04-20-2017 12:16:27.455 +0200 ERROR ModularInputs - Unable to initialize modular input "app_permissions_manager" defined inside the app "SplunkEnterpriseSecuritySuite": Introspecting scheme=app_permissions_
manager: script running failed (exited with code 1).
04-20-2017 12:16:27.660 +0200 ERROR ModularInputs - Introspecting scheme=es_deployment_manager: script running failed (exited with code 1).
04-20-2017 12:16:27.660 +0200 ERROR ModularInputs - Unable to initialize modular input "es_deployment_manager" defined inside the app "SplunkEnterpriseSecuritySuite": Introspecting scheme=es_deployment_mana
ger: script running failed (exited with code 1).
04-20-2017 12:16:27.867 +0200 ERROR ModularInputs - Introspecting scheme=ess_content_importer: script running failed (exited with code 1).
04-20-2017 12:16:27.867 +0200 ERROR ModularInputs - Unable to initialize modular input "ess_content_importer" defined inside the app "SplunkEnterpriseSecuritySuite": Introspecting scheme=ess_content_importe
r: script running failed (exited with code 1).

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...