Hi,
I had the same issue as above. Fixed! eSteramer IS collecting data, however, initialization of TA-eStreamer still fails, though.
index="_internal" source="*splunkd.log" (SetupAdminHandler OR AdminManagerExternal)
11-09-2017 09:57:23.935 +0100 ERROR AdminManagerExternal - Unable to xml-parse the following data: %s/opt/splunk/etc/apps/TA-eStreamer/bin/encore\nSplencore found pid. Terminating "python ./estreamer/service.py estreamer.conf" (253... See splunkd.log for full data.
11-09-2017 09:57:23.935 +0100 ERROR AdminManagerExternal - Received malformed XML from external handler: /opt/splunk/etc/apps/TA-eStreamer/bin/encore\nSplencore found pid. Terminating "python ./estreamer/service.py estreamer.conf" (25346)\nConfiguring\n<eai><eai_settings><CONFIG_FILE>encore</CONFIG_FILE><FIELDS>[{'name': 'client_enabled', 'default': '0'}, {'name': 'host', 'default': ''}, {'name': 'port', 'default': '8302'}, {'name': 'process_pkcs12', 'default': '0'}, {'name': 'pkcs12_password', 'default': ''}, {'name': 'write_packets', 'default': '0'}, {'name': 'write_connections', 'default': '0'}, {'name': 'write_metadata', 'default': '0'}, {'name': 'changed', 'default': '0'}]</FIELDS><FIELDS>[{'name': 'client_enabled', 'default': '0'}, {'name': 'host', 'default': ''}, {'name': 'port', 'default': '8302'}, {'name': 'process_pkcs12', 'default': '0'}, {'name': 'pkcs12_password', 'default': ''}, {'name': 'write_packets', 'default': '0'}, {'name': 'write_connections', 'default': '0'}, {'name': 'write_metadata', 'default': '0'}, {'name': 'changed', 'default': '0'}]</FIELDS><FIELDS>[{'name': 'client_enabled', 'default': '0'}, {'name': 'host', 'default': ''}, {'name': 'port', 'default': '8302'}, {'name': 'process_pkcs12', 'default': '0'}, {'name': 'pkcs12_password', 'default': ''}, {'name': 'write_packets', 'default': '0'}, {'name': 'write_connections', 'default': '0'}, {'name': 'write_metadata', 'default': '0'}, {'name': 'changed', 'default': '0'}]</FIELDS><FIELDS>[{'name': 'client_enabled', 'default': '0'}, {'name': 'host', 'default': ''}, {'name': 'port', 'default': '8302'}, {'name': 'process_pkcs12', 'default': '0'}, {'name': 'pkcs12_password', 'default': ''}, {'name': 'write_packets', 'default': '0'}, {'name': 'write_connections', 'default': '0'}, {'name': 'write_metadata', 'default': '0'}, {'name': 'changed', 'default': '0'}]</FIELDS><FIELDS>[{'name': 'client_enabled', 'default': '0'}, {'name': 'host', 'default': ''}, {'name': 'port', 'default': '8302'}, {'name': 'process_pkcs12', 'default': '0'}, {'name': 'pkcs12_password', 'default': ''}, {'name': 'write_packets', 'default': '0'}, {'name': 'write_connections', 'default': '0'}, {'name': 'write_metadata', 'default': '0'}, {'name': 'changed', 'default': '0'}]</FIELDS><FIELDS>[{'name': 'client_enabled', 'default': '0'}, {'name': 'host', 'default': ''}, {'name': 'port', 'default': '8302'}, {'name': 'process_pkcs12', 'default': '0'}, {'name': 'pkcs12_password', 'default': ''}, {'name': 'write_packets', 'default': '0'}, {'name': 'write_connections', 'default': '0'}, {'name': 'write_metadata', 'default': '0'}, {'name': 'changed', 'default': '0'}]</FIELDS><FIELDS>[{'name': 'client_enabled', 'default': '0'}, {'name': 'host', 'default': ''}, {'name': 'port', 'default': '8302'}, {'name': 'process_pkcs12', 'default': '0'}, {'name': 'pkcs12_password', 'default': ''}, {'name': 'write_packets', 'default': '0'}, {'name': 'write_connections', 'default': '0'}, {'name': 'write_metadata', 'default': '0'}, {'name': 'changed', 'default': '0'}]</FIELDS><FIELDS>[{'name': 'client_enabled', 'default': '0'}, {'name': 'host', 'default': ''}, {'name': 'port', 'default': '8302'}, {'name': 'process_pkcs12', 'default': '0'}, {'name': 'pkcs12_password', 'default': ''}, {'name': 'write_packets', 'default': '0'}, {'name': 'write_connections', 'default': '0'}, {'name': 'write_metadata', 'default': '0'}, {'name': 'changed', 'default': '0'}]</FIELDS><FIELDS>[{'name': 'client_enabled', 'default': '0'}, {'name': 'host', 'default': ''}, {'name': 'port', 'default': '8302'}, {'name': 'process_pkcs12', 'default': '0'}, {'name': 'pkcs12_password', 'default': ''}, {'name': 'write_packets', 'default': '0'}, {'name': 'write_connections', 'default': '0'}, {'name': 'write_metadata', 'default': '0'}, {'name': 'changed', 'default': '0'}]</FIELDS><appName>TA-eStreamer</appName><callerArgs><id>main</id><args><attrib type="list" name="client_enabled" datatype="string"><item>0</item></attrib><attrib type="list" name="write_connections" datatype="string"><item>0</item></attrib><attrib type="item" name="pkcs12_password" datatype="string"></attrib><attrib type="list" name="write_packets" datatype="string"><item>0</item></attrib><attrib type="list" name="host" datatype="string"><item>10.3.7.100</item></attrib><attrib type="list" name="changed" datatype="string"><item>1</item></attrib><attrib type="item" name="process_pkcs12" datatype="string">0</attrib><attrib type="list" name="port" datatype="string"><item>8302</item></attrib><attrib type="list" name="write_metadata" datatype="string"><item>0</item></attrib></args></callerArgs><capabilityRead></capabilityRead><capabilityWrite></capabilityWrite><context>1</context><customAction></customAction><customActionCap></customActionCap><didFilter>False</didFilter><didPaginate>False</didPaginate><docShowEntry>True</docShowEntry><maxCount>30</maxCount><posOffset>0</posOffset><requestedAction>4</requestedAction><requestedFilters></requestedFilters><restartRequired>False</restartRequired><shouldAutoList>True</shouldAutoList><shouldFilter>False</shouldFilter><shouldReload>False</shouldReload><sortAscending>true</sortAscending><sortByKey>name</sortByKey><supportedArgs/><userName>nobody</userName></eai_settings><config_info><feed_name></feed_name></config_info></eai>\n
I checked the XML file estreamer.conf for syntax of brackets. It looks OK.
Anyone understands what is wrong? I am just following installation guide. Nothing else.
Tomas
... View more