Installation

Invalid key in stanza (value: python3)

mah
Builder

Hi,

After several update of some splunkbase apps and after a restart of my search head, I get this error :

Invalid key in stanza [lookup_watcher] in /opt/splunk/etc/apps/SplunkAdmins/default/inputs.conf, line 2: python.version (value: python3).
Invalid key in stanza [sendresults_alert] in /opt/splunk/etc/apps/sendresults/default/alert_actions.conf, line 7: python.version (value: python3).
Invalid key in stanza [slack] in /opt/splunk/etc/apps/slack_alerts/default/alert_actions.conf, line 6: python.version (value: python3).
Invalid key in stanza [script://$SPLUNK_HOME/etc/apps/splunk-dashboard-app/bin/save_image_and_icon_on_install.py] in /opt/splunk/etc/apps/splunk-dashboard-app/default/inputs.conf, line 4: python.version (value: python3).

mah_0-1610455370207.png

I am in 7.3.4 and before updating, I checked the compatibility version with both 7.3 and 8.x because I am about to upgrade my platform to a 8.x version.    

Is this message (python3) will block the functionality of app updated  on the 7.3.4 splunk version ? 

Thank you.

Labels (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

"Invalid key" messages (they're really just warnings rather than errors) notify you of entries in config files that are not recognized.  That is, the key specified is not in the corresponding .spec file.  Usually, this is the result of a spelling error.  In this case, however, the key is known only to Splunk versions 8 and higher so the messages can be ignored in earlier versions.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

"Invalid key" messages (they're really just warnings rather than errors) notify you of entries in config files that are not recognized.  That is, the key specified is not in the corresponding .spec file.  Usually, this is the result of a spelling error.  In this case, however, the key is known only to Splunk versions 8 and higher so the messages can be ignored in earlier versions.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...