Hi,
I had the same problem and found out that, in version 3.1.0, the app expects to be installed on an indexer and therefore looks for a list of search peers via the REST API. My workaround was to change the file remote.py to use localhost if no search peers can be found:
--- Splunk_TA_opseclea_linux22/appserver/controllers/remote.py.orig 2015-11-25 13:43:21.000000000 +0100
+++ Splunk_TA_opseclea_linux22/appserver/controllers/remote.py 2015-11-25 16:04:14.000000000 +0100
@@ -43,11 +43,17 @@
controllers.BaseController.__init__(self, *args, **kwargs)
self.peer_cache = PeerCache(cache_age=60)
def get_all_peers(self, sessionKey):
- peers = en.getEntities("search/distributed/peers", sessionKey=sessionKey)
+ try:
+ peers = en.getEntities("search/distributed/peers", sessionKey=sessionKey)
+ except:
+ filtered_hosts = [ { "status": "available", "peer": "localhost" } ]
+ return filtered_hosts
+
+
peerHosts = []
server_info_path = "/services/server/info"
for name in peers:
peer = peers[name]
I hope this helps.
... View more
