Installation

Invalid key in stanza (value: python3)

mah
Builder

Hi,

After several update of some splunkbase apps and after a restart of my search head, I get this error :

Invalid key in stanza [lookup_watcher] in /opt/splunk/etc/apps/SplunkAdmins/default/inputs.conf, line 2: python.version (value: python3).
Invalid key in stanza [sendresults_alert] in /opt/splunk/etc/apps/sendresults/default/alert_actions.conf, line 7: python.version (value: python3).
Invalid key in stanza [slack] in /opt/splunk/etc/apps/slack_alerts/default/alert_actions.conf, line 6: python.version (value: python3).
Invalid key in stanza [script://$SPLUNK_HOME/etc/apps/splunk-dashboard-app/bin/save_image_and_icon_on_install.py] in /opt/splunk/etc/apps/splunk-dashboard-app/default/inputs.conf, line 4: python.version (value: python3).

mah_0-1610455370207.png

I am in 7.3.4 and before updating, I checked the compatibility version with both 7.3 and 8.x because I am about to upgrade my platform to a 8.x version.    

Is this message (python3) will block the functionality of app updated  on the 7.3.4 splunk version ? 

Thank you.

Labels (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

"Invalid key" messages (they're really just warnings rather than errors) notify you of entries in config files that are not recognized.  That is, the key specified is not in the corresponding .spec file.  Usually, this is the result of a spelling error.  In this case, however, the key is known only to Splunk versions 8 and higher so the messages can be ignored in earlier versions.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

"Invalid key" messages (they're really just warnings rather than errors) notify you of entries in config files that are not recognized.  That is, the key specified is not in the corresponding .spec file.  Usually, this is the result of a spelling error.  In this case, however, the key is known only to Splunk versions 8 and higher so the messages can be ignored in earlier versions.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...