Hi,
I am trying to integrate AWS ALB logs using sqs based s3.
However, I am getting below error. I used ELB Access Logs decoder and tried with different source types.
2022-02-22 02:57:56,763 level=ERROR pid=18045 tid=MainThread logger=splunk_ta_aws.modinputs.sqs_based_s3.handler pos=utils.py:wrapper:72 | datainput="symplistaging1_elb" start_time=1645498672 | message="Data input was interrupted by an unhandled exception."
Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/splunksdc/utils.py", line 70, in wrapper
return func(*args, **kwargs)
File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/splunk_ta_aws/modinputs/sqs_based_s3/handler.py", line 668, in run
decoder = self.create_file_decoder()
File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/splunk_ta_aws/modinputs/sqs_based_s3/handler.py", line 572, in create_file_decoder
return factory.create(**vars(args))
File "/opt/splunk/etc/apps/Splunk_TA_aws/bin/splunk_ta_aws/common/decoder.py", line 164, in create
return decoder_type(**kwargs)
TypeError: 'NoneType' object is not callable
Any ideas or solutions highly appreciated?
BR,
Gayan