Building for the Splunk Platform

Python Script: Permission Denied in one of the Methods

morethanyell
Builder

Hi,

I have a working Python script that when ran as whoami=splunk in the same box, works just fine and as expected.

When the script is enabled in the Scripted Inputs with "every 5 min" schedule, one line in my ciode does not work and the python processor logs "Permission Denied" in index=_internal.

This is the line that doesn't work (Line  3)

 

 

 

Line 1.
temp_filename = sess + '.tmp'

Line 2.
wget_result = os.system('wget -O ./' + temp_filename + ' --append-output=' + LOGFILE_DIR_WGET + ' --user ' + svcacct_un + ' --password ' + svcacct_pw +  ' --no-check-certificate ' + _url)

Line 3.
checksum = hashlib.md5(open('./' + temp_filename, "rb").read()).hexdigest();

 

 

 

the Error looks like this

 

 

 

03-29-2021 15:55:17.507 +0100 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/***************" ./b97fcd39-1201-4638-8d41-8ae32168cd70.tmp: Permission denied

 

 

 

Anyone?

 

Labels (2)
0 Karma
1 Solution

morethanyell
Builder

Apparently, the filename / path doesn't exist as 

'./' + temp_filename

When changed with absolute filepath, it worked.

View solution in original post

0 Karma

morethanyell
Builder

Apparently, the filename / path doesn't exist as 

'./' + temp_filename

When changed with absolute filepath, it worked.

0 Karma

Vardhan
Contributor

Hi @morethanyell ,

Try to give the full permissions to the script file and restart. And check the output.

0 Karma

morethanyell
Builder

meaning give 777 to the script itself?

0 Karma

Vardhan
Contributor

yes..

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...