Splunk Enterprise

EventGen: : 'HTTPEventOutputPlugin' object has no attribute 'serverPool'

khayamgondal
Engager

EventGen v7.2.1 throws the following exception - Python 3.9.2 DockerImage: nginx

eventgen        2022-04-06 15:08:42 eventgen        ERROR    MainProcess Unexpected character in found when decoding object value
Traceback (most recent call last):
  File "/usr/local/lib/python3.9/dist-packages/splunk_eventgen/lib/plugins/output/httpevent_core.py", line 136, in updateConfig
    self.httpeventServers = json.loads(config.httpeventServers)
ValueError: Unexpected character in found when decoding object value
2022-04-06 15:08:42 eventgen        ERROR    MainProcess 'HTTPEventOutputPlugin' object has no attribute 'serverPool'
Traceback (most recent call last):
  File "/usr/local/lib/python3.9/dist-packages/splunk_eventgen/lib/plugins/output/httpevent_core.py", line 250, in _sendHTTPEvents
    self._transmitEvents(stringpayload)
  File "/usr/local/lib/python3.9/dist-packages/splunk_eventgen/lib/plugins/output/httpevent_core.py", line 261, in _transmitEvents
    targetServer.append(random.choice(self.serverPool))
AttributeError: 'HTTPEventOutputPlugin' object has no attribute 'serverPool'
2022-04-06 15:08:42 eventgen        ERROR    MainProcess failed indexing events, reason: 'HTTPEventOutputPlugin' object has no attribute 'serverPool'

.conf file

[cyclical.csv]
mode=sample
interval=60
count=1
outputMode=httpevent
httpeventServers = {"servers": [{"protocol": "https", "port": "8088", "key": "0617eea5-87a9-4d18-8ed4-6dc085ddbe2c"", "address": "172.19.15.140"}]}
index=main
sourcetype=eventgen
sampletype=csv
source=eventgen_cyclical

I am running it like this

v7.2.1 throws the following exception. Python:3.9.2 DockerImage:nginx

eventgen        2022-04-06 15:08:42 eventgen        ERROR    MainProcess Unexpected character in found when decoding object value
Traceback (most recent call last):
  File "/usr/local/lib/python3.9/dist-packages/splunk_eventgen/lib/plugins/output/httpevent_core.py", line 136, in updateConfig
    self.httpeventServers = json.loads(config.httpeventServers)
ValueError: Unexpected character in found when decoding object value
2022-04-06 15:08:42 eventgen        ERROR    MainProcess 'HTTPEventOutputPlugin' object has no attribute 'serverPool'
Traceback (most recent call last):
  File "/usr/local/lib/python3.9/dist-packages/splunk_eventgen/lib/plugins/output/httpevent_core.py", line 250, in _sendHTTPEvents
    self._transmitEvents(stringpayload)
  File "/usr/local/lib/python3.9/dist-packages/splunk_eventgen/lib/plugins/output/httpevent_core.py", line 261, in _transmitEvents
    targetServer.append(random.choice(self.serverPool))
AttributeError: 'HTTPEventOutputPlugin' object has no attribute 'serverPool'
2022-04-06 15:08:42 eventgen        ERROR    MainProcess failed indexing events, reason: 'HTTPEventOutputPlugin' object has no attribute 'serverPool'

EventGen conf file

[cyclical.csv]
mode=sample
interval=60
count=1
outputMode=httpevent
httpeventServers = {"servers": [{"protocol": "https", "port": "8088", "key": "0617eea5-87a9-4d18-8ed4-6dc085ddbe2c"", "address": "172.19.15.140"}]}
index=main
sourcetype=eventgen
sampletype=csv
source=eventgen_cyclical

Running it using
python3 -m splunk_eventgen -v generate -s cyclical.csv eventgen.conf

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...