Why is the splunkweb service not starting and getting "ImportError: No module named lookupfiles"?

[brdr]

Hi Splunk,

The splunkweb service is not starting. Here is entry in the log:

Any ideas?

2016-07-19 14:42:13,921 ERROR   [578e7485507f6a9721b510] root:816 - Unable to start splunkweb
2016-07-19 14:42:13,921 ERROR   [578e7485507f6a9721b510] root:817 - No module named lookupfiles
Traceback (most recent call last):
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/root.py", line 101, in 
    from controllers.top import *
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/top.py", line 13, in 
    from admin import AdminController
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/admin.py", line 17, in 
    from splunk.appserver.mrsparkle.controllers.appinstall import AppInstallController
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/appinstall.py", line 9, in 
    from splunk.appserver.mrsparkle.lib import cached, module
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 465, in 
    moduleMapper = ModuleMapper()
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 79, in __init__
    self.installedModules = self.getInstalledModules()
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 24, in helper
    return f(*a, **kw)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 448, in getInstalledModules
    mods = self.getModuleList(root)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 33, in helper
    return f(*a, **kw)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 219, in getModuleList
    mod = __import__(modname)
  File "/opt/splunk/etc/slave-apps/SA-Utils/appserver/modules/SOLNLookupEditor/SOLNLookupEditor.py", line 22, in 
    import lookupfiles
ImportError: No module named lookupfiles
2016-07-19 15:20:21,793 INFO    [578e7d75b77f9f6aa274d0] __init__:168 - Using default logging config file: /opt/splunk/etc/log.cfg
2016-07-19 15:20:21,794 INFO    [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk level=INFO
2016-07-19 15:20:21,794 INFO    [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.appserver level=INFO
2016-07-19 15:20:21,794 INFO    [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.appserver.controllers level=INFO
2016-07-19 15:20:21,795 INFO    [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.appserver.controllers.proxy level=INFO
2016-07-19 15:20:21,795 INFO    [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.appserver.lib level=WARN
2016-07-19 15:20:21,795 INFO    [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.pdfgen level=INFO

[Heff · Accepted solution]

I saw this about replacing "apps" with "slave-apps" in make_splunkhome_path function in files below?

https://answers.splunk.com/answers/305921/why-is-splunkweb-is-not-starting-on-indexers-with.html

[brdr]

Thanks Heff.

I followed the post above, restarted splunk on the indexer that the web service was failing, and all is well.

Couple of things. The other indexer in the cluster didn't experience this issue when cluster bundle was applied to both. It was the NetApp ONTAP app (SA-Utils, SA-Hydra) that I was pushing when I ran into this issue.

NOTE:
There are dozens of files in these SAs that contain the word "apps" and not "slave-apps" when defining path.