All Apps and Add-ons

How to fix "Invalid key in stanza" issue?

rendie
Path Finder

Hi all, I have little issue with input made via Add-on Builder (Python3). I have been made some inputs and all other inputs work correctly, but only one does not run, and in _internal a have error "Invalid key in stanza [input_http] in /opt/splunk/etc/apps/application-for-splunk/default/inputs.conf, line 68: python.version (value: python3)." I use Add-on builder version 3.0.1 and Splunk Enterprise 7.3.1.1.

How I can fix it?

Thanks.

ricotries
Communicator

Splunk is complaining that there is a key under a header that it does not recognize. Briefly looking at inputs.conf reference manual for 7.3.1 (here) you can see that neither [input_http] nor python.version are recognized by that version of Splunk. The reason your input is not working is most likely due to being placed under a header that Splunk does not know what it means for inputs.conf (the python.version invalid key is most likely not the source of the issue, it would most likely be ignored).

Splunk uses the Python 3 interpreter by default so there's no need to specify it (as well as the fact that in inputs.conf, there is no key for "python.version").

If you are trying to enable a HTTP Event Collector Input, use the settings shown under this category.

Get Updates on the Splunk Community!

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...

Admin Console: A Single, Unified Interface for All Your Cloud Admin Needs

WATCH NOWJoin us to learn how the admin console can save you time and give you more control over the Splunk® ...