Sourcefire estreamer

[timlaw71]

I'm trying to get estreamer working on splunk. I have downloaded the splunk app and configured the files in the app according to the README. The ssl_test.pl script works but when I run the estreamer.py script I get
Traceback (most recent call last):
File "./estreamer.py", line 10, in
APP_PATH = os.path.join(os.environ["SPLUNK_HOME"], 'etc', 'apps', 'Sourcefire')
File "/usr/lib64/python2.6/UserDict.py", line 22, in getitem
raise KeyError(key)
KeyError: 'SPLUNK_HOME'
Any help would be appreciated.

Thanks,
Tim

[edbolton]

You need to export the envrionment variable SPLUNK_HOME in your shell.

KeyError: 'SPLUNK_HOME'