SA-Eventgen doesn't work?

Path Finder

i downloaded from ,i installed eventgen ,but it doesn't work,i don't what should i do?
it just three indexes in generating data,otheres doesn't change.i try to follow the process operation。

You can easily run these examples by hand. In fact, for testing purposes, I almost always change outputMode = file (you can see it commented out in most of the tutori
als) and run the eventgen by hand to make sure my substitutions are setup correctly. In this case, assuming you've customized the tutorial file for your splunk host,
username and password, lets run the tutorial and see it replay these events. From the base directory of the eventgen:
python bin/ README/eventgen.conf.tutorial1

[root@localhost SA-Eventgen]# python bin/ README/eventgen.conf.tutorial1
Traceback (most recent call last):
File "bin/", line 21, in
from eventgenconfig import Config
File "/opt/splunk/etc/apps/SA-Eventgen/lib/", line 14, in
from eventgensamples import Sample
File "/opt/splunk/etc/apps/SA-Eventgen/lib/", line 14, in
from eventgenoutput import Output
File "/opt/splunk/etc/apps/SA-Eventgen/lib/", line 5, in
import httplib, httplib2
ImportError: No module named httplib2

i don't know wth,who can help me or tell me the url for download the SA-Eventgen.

Tags (1)


I had the same problem and followed the instructions here and it helped me get Eventgen up and running. I love this tool!

In short, I downloaded httplib2 2.0.8, unpacked it, then ran the $ python install command from that directory.

Path Finder

You need to install the python library httplib2. To do that, run the command
"pip install httplib2"

Here is a link to httplib2:

Here is a link to how to install pip on redhat/centos

0 Karma
Get Updates on the Splunk Community!

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...

What’s New in Splunk Cloud Platform 9.1.2308?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2308! Analysts can ...