I'm trying to run the Eventgen app on a Splunk 6.4 installation. It runs fine in thread mode, but fails in "process" mode with the following errors in the logs:
05-25-2016 09:50:51.182 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/eventgen/bin/eventgen_modinput.py" ImportError: No module named sharedctypes
05-25-2016 10:30:08.534 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/eventgen/bin/eventgen_modinput.py" from multiprocessing.sharedctypes import RawValue
sharedctypes.py is indeed not found in the python deployment coming with 6.4.
What is the cleanest way to add this module?
... View more