Splunk Dev

ImportError: No module named Site

po1splunk
New Member

I am trying out Splunk on Windows Server 2012, version 6.6.3 and attempting to do a scripted lookup with a python script. My actual script (makes HTTP call, returns json, I parse and return csv) works with my own installation of Python 2.7 but when I try to run it with the built-in Splunk version I get ImportError: No module named Site

I've searched and found a couple similar posts about this but what has me scratching my head is if I run "C:\Program Files\Splunk\bin\python.exe" test.py I get

ImportError: No module named Site 

Now, the only thing in test.py is the statement

print "hello"

If I run "C:\Program Files\Splunk\bin\python.exe" -S test.py I get the expected output

hello

This is a sanity test script of course, just to see if I can get it to do anything I'd expect. So what is going on with the -S (where I'm telling python to ignore site-packages I believe) vrs. not having that arg and I get an error?

Is there something wrong with my install? With a simple print statement I'd expect the built-in Python to work without issue but it does not.

Any ideas?? Thanks in advance for any input on this.

0 Karma
1 Solution

nickhills
Ultra Champion

If you want to run your script the way Splunk does (with its own libraries and modules) try this:

C:\Program Files\Splunk\bin\splunk cmd python ../path to/your script.py

I'm not suggesting this will solve your issue immediately, but under the covers that is how Splunk will execute your script.

If my comment helps, please give it a thumbs up!

View solution in original post

nickhills
Ultra Champion

If you want to run your script the way Splunk does (with its own libraries and modules) try this:

C:\Program Files\Splunk\bin\splunk cmd python ../path to/your script.py

I'm not suggesting this will solve your issue immediately, but under the covers that is how Splunk will execute your script.

If my comment helps, please give it a thumbs up!

po1splunk
New Member

Ah, subtle difference. This runs the script as intended. Thank you for this help!!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Get Agentic with Splunk Lantern: Connect to Cisco Cloud Control, Transform ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

July Community Events: Master ITSI 5.0 & Automate Splunk

Struggling with alert fatigue or feeling like you're spending more time on infrastructure maintenance than ...

New Release of Federated Search: Bringing Splunk Analytics to More of Your Data

Organizations today are generating more data than ever and storing it across cloud object stores, data lakes, ...