Splunk Dev

Why do I get the following import ERROR when I create a custom search command with a Python script?

aiacobelli
Explorer

Greetings!

I am writing a Python script to create a custom search command that goes out and reaches out to an API to get some data back based on what is passed to it. Whenever I run the script via /opt/splunk/bin/splunk cmd python splunk.py, I get the following import error:

Traceback (most recent call last):
  File "splunk.py", line 2, in <module>
    import splunk.Intersplunk
  File "/opt/splunk/etc/apps/duoSearch/bin/splunk.py", line 2, in <module>
    import splunk.Intersplunk
ImportError: No module named Intersplunk

When I open up the interpreter via /opt/splunk/bin/splunk cmd python and try to import it there via import splunk.Intersplunk , I do not get an error.

0 Karma
1 Solution

harsmarvania57
Ultra Champion

Hi @aiacobelli,

I replicated same issue in my lab environment. Please rename your python file name to something else like splunk123.py . Also remove splunk.pyc file from directory /opt/splunk/etc/apps/duoSearch/bin/ and it will work.

Thanks,
Harshil

View solution in original post

0 Karma

harsmarvania57
Ultra Champion

Hi @aiacobelli,

I replicated same issue in my lab environment. Please rename your python file name to something else like splunk123.py . Also remove splunk.pyc file from directory /opt/splunk/etc/apps/duoSearch/bin/ and it will work.

Thanks,
Harshil

0 Karma

aiacobelli
Explorer

Thank you! That did it!

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...