All Apps and Add-ons

How do you fix a python path issue?

jwhughes58
Contributor

I have the splunk_app_db_connect installed and it works correctly until I install TA-Proofpoint-TAP. When The DB Connect UI is started it generates this error

<?xml version="1.0" encoding="UTF-8"?>
  <response>
    <messages>
      <msg type="WARN">Traceback (most recent call last): File "/splunk/cold/apps/splunk/bin/rest_handler.py",
        line 79, in <module> print splunk.rest.dispatch(**params) File "/splunk/cold/apps/splunk/lib/python2.7/site-packages/splunk/rest/__init__.py",
        line 149, in dispatch module = __import__('splunk.rest.external.%s' % parts[0], None, None, parts[0]) File "/splunk/cold/apps/splunk/etc/apps/splunk_app_db_connect/bin/dbxproxy.py"
        line 7, in <module> from dbx_settings import Settings File "/splunk/cold/apps/splunk/etc/apps/splunk_app_db_connect/bin/dbx_settings.py",
        line 10, in <module> import splunklib.client as client File "/splunk/cold/apps/splunk/etc/apps/TA-Proofpoint-TAP/bin/splunklib/__init__.py",
        line 18, in <module> from splunklib.six.moves import map ImportError: No module named six.moves </msg>
    </messages>
  </response>

If the TA isn't there, then the error isn't generated. From reading the message it appears that the splunklib is being picked up from the incorrect directory. I've tried putting a print in the dbx_settings.py to see what the path is before it reaches the import, but I've never found the output. Any ideas on how I can capture the path information so I can see why python is picking up the wrong splunklib.client?

TIA,
Joe

0 Karma
1 Solution

kheo_splunk
Splunk Employee
Splunk Employee

This issue has been fixed in DB Connect app version 3.1.4. Please see the reference for DBX-4623 in the following release note.

https://docs.splunk.com/Documentation/DBX/3.1.4/ReleaseNotes/Releasenotes

View solution in original post

0 Karma

kheo_splunk
Splunk Employee
Splunk Employee

This issue has been fixed in DB Connect app version 3.1.4. Please see the reference for DBX-4623 in the following release note.

https://docs.splunk.com/Documentation/DBX/3.1.4/ReleaseNotes/Releasenotes

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...