Found my problem... I renamed the app directory to fit our particular deployment, and the script at bin/check_my_reputation.py calls the app directory by name in this section:
def readConf(confName):
app_dir = os.path.join(os.environ["SPLUNK_HOME"], 'etc', 'apps')
app_path = os.path.join(app_dir, 'TA-SMTP-Reputation')
I had to rename the app_dir to match our directory name. After that the script ran ok.
... View more
I get the same output. I copied default/reputation.conf to local/reputation.conf and added a semicolon-delimited list of IP addresses after iplist=
... View more