Monitoring Splunk

modular input and ERROR AdminManagerDispatch cannot call handler

clorne
Communicator

Hello,

I am trying to install a modular input.
On a standalone Splunk, there is no problem, the setup dashboard shows up perfectly.

But on an heavy forwarder I get the following error:
+200 ERROR AdminManagerDispatch - Cannot call handler 'TA_xxx' du to missing script 'my-script.py'.

The script is present in TA/bin/my_script.py
The TA/local/restmap.conf contains the stanza:

[admin_external:TA_string]
handlertype = python
handlerfile = my_script.py
handleractions = edit, list, remove, create

If anyone has a small idea ...

Cheers
Céline

Tags (1)
0 Karma

skalliger
Motivator

Sounds like a permission problem.

And usually the scripts don't require a run permission but after checking ownership of folders I would try to add +x to the script.

Skalli

0 Karma

clorne
Communicator

Hello Skalliger.
You were right. Our windows git has modified the properties of all the files and there was no x anymore.
This is solved.

Thanks a lot.
Best Regards
Céline

0 Karma

skalliger
Motivator

Thanks for the feedback. Accepting an answer keeps us motivated. 😛

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...