Splunk Enterprise

Error message

andy2025
New Member

Hello,

I tried to configure SplunkForwarder but I got this error message. Ple

"Unable to initialize modular input”upload_pcap” defined in the app “splunk_app_stream.” Introspecting scheme=upload_pcap:script running failed (exited with code 1)"

Labels (1)
0 Karma

kiran_panchavat
SplunkTrust
SplunkTrust

@andy2025  That introspection error means your script failed to load, could be a syntax error, etc.

Check this, but it's an outdated version.  https://community.splunk.com/t5/All-Apps-and-Add-ons/Unable-to-initialize-modular-input-quot-upload-... 

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...