Got it. Thank you so much. Really appreciated your guidance and teaching. Clare ... View more

That is interesting, I can launch Pyden and it does have a GUI in Splunk 8: http://XXXXXXXXXX:8000/en-US/app/pyden/web_input_monitoring?form.timefield.earliest=-24h%40h&form.timefield.latest=now But in Splunk 7 this GUI will open below link instead: http://iaasn00069250:8000/en-US/app/pyden/gallery And if I disable gallery, it will load another app. Don't I need to Pyden GUI to see all the virtual environment? Thank you so much for you help. Clare ... View more

Did not work: systemctl stop splunk rm -rf pyden tar xvzf pyden_123.tgz systemctl start splunk I did need to relogin to the splunk instance but i still see pyden as the app loaded (even it shows a different app). Something in the cache that is not related to the app? But i can launch Pyden-manager no issue. Very very strange. Wonder what log i can see details when loading/launch app? ... View more

Hey, thanks for replying. No, i checked all dir/files and even did: rm -rf pyden so no multiple folders. After i removed the folder, i downloaded the latest Pyden tgz file and loaded it again via the instance GUI. Wait, let me just untar/ungzip the file into the folder to see if it will make any difference. ... View more

Found the error when inspect job and search log: 04-30-2020 13:45:59.271 ERROR ScriptRunner - stderr from '/opt/splunk/bin/python2.7 /opt/splunk/etc/apps/pyden-manager/bin/create_dist.py version=3.7.7': Traceback (most recent call last): 04-30-2020 13:45:59.271 ERROR ScriptRunner - stderr from '/opt/splunk/bin/python2.7 /opt/splunk/etc/apps/pyden-manager/bin/create_dist.py version=3.7.7': File "/opt/splunk/etc/apps/pyden-manager/bin/create_dist.py", line 204, in 04-30-2020 13:45:59.271 ERROR ScriptRunner - stderr from '/opt/splunk/bin/python2.7 /opt/splunk/etc/apps/pyden-manager/bin/create_dist.py version=3.7.7': build_dist(dist_version, download_arg) 04-30-2020 13:45:59.271 ERROR ScriptRunner - stderr from '/opt/splunk/bin/python2.7 /opt/splunk/etc/apps/pyden-manager/bin/create_dist.py version=3.7.7': File "/opt/splunk/etc/apps/pyden-manager/bin/create_dist.py", line 88, in build_dist 04-30-2020 13:45:59.271 ERROR ScriptRunner - stderr from '/opt/splunk/bin/python2.7 /opt/splunk/etc/apps/pyden-manager/bin/create_dist.py version=3.7.7': del os.environ['PYTHONPATH'] 04-30-2020 13:45:59.271 ERROR ScriptRunner - stderr from '/opt/splunk/bin/python2.7 /opt/splunk/etc/apps/pyden-manager/bin/create_dist.py version=3.7.7': File "/opt/splunk/lib/python2.7/os.py", line 498, in delitem 04-30-2020 13:45:59.271 ERROR ScriptRunner - stderr from '/opt/splunk/bin/python2.7 /opt/splunk/etc/apps/pyden-manager/bin/create_dist.py version=3.7.7': del self.data[key] 04-30-2020 13:45:59.271 ERROR ScriptRunner - stderr from '/opt/splunk/bin/python2.7 /opt/splunk/etc/apps/pyden-manager/bin/create_dist.py version=3.7.7': KeyError: 'PYTHONPATH' 04-30-2020 13:45:59.303 ERROR script - sid:1588268752.16252 External search command 'createdist' returned error code 1. . ... View more

I have two splunk instances, one is splunk-7.3.1 on RHEL 7.5., second one is splunk-8.0.0 on RHEL 7.4. 1). On both servers, i have built Cpython from source no issue and no issue in using pipenv creating user python virtual environment. That means all the libs are installed and available. 2.) I setup the same proxy/non_proxy entries in splunk.launch.conf file so they can connect to the internet. 3.) I used both green button and run the createdist command on both splunk instance as admin. 4.) Here is where i get lost: A: On the first splunk instance, pyden-manager can download/build cpython dist and i can see them in pyden dir: # ls /opt/splunk/etc/apps/pyden/local/lib/dist/3.8.2/bin 2to3-3.8 easy_install-3.8 idle3.8 pip pip3 pip3.8 pydoc3.8 python3.8 python3.8-config B: On second splunk, it will appeared to download/build, but it does not. And i can tell it has run into a issue since the createdist take too short to finish. It only create a empty dir: ]# ls -l /opt/splunk/etc/apps/pyden/local/lib/dist total 0 drwx--x---. 2 root root 6 Apr 29 22:21 3.7.7 drwxr-xr-x. 2 splunk splunk 6 Apr 29 22:12 3.8.2 The error message does not really tell me anything: | createdist version=3.7.7 External search command 'createdist' returned error code 1. . 5:) I have since then delete pyden-manager and pyden apps, restart splunk, reinstalled the two apps. I also check the splunk_home location, ownder and permissions etc. Still no idea what is wrong. 6.) is there a log that can give me some clue? How do i trouble shooting the issue? Please help. Clare ... View more