Hi, I am trying to run file_meta_Data app in aix, and keep getting an exit code of 1 from introspection
It runs successfully for me in Linux, so I believe I have the basic config setup working properly.
Versions:
splunk universal forwarder version 7.2.6
AIX version 7.1
python version 2.6.2
file_meta_data app version 1.4.2
inputs.conf config sample
[file_meta_data://blah837P]
file_path = /npc/clients/blah837P/
host=
interval = 2m
recurse = 1
only_if_changed = 1
include_file_hash = 0
depth_limit = 10000
# file_filter = 999*
index = app_custom
sourcetype = db:meta:files
[file_meta_data://ntst277CA]
file_path = /npc/clients/blah/277CA/
host=
interval = 2m
recurse = 1
only_if_changed = 1
include_file_hash = 0
depth_limit = 10000
# file_filter = 999*
index = app_custom
sourcetype = db:meta:files
error message from splunkd.log:
08-07-2019 11:08:32.784 -0400 ERROR ModularInputs - Introspecting scheme=file_meta_data: script running failed (exited with code 1).
08-07-2019 11:08:32.784 -0400 ERROR ModularInputs - Unable to initialize modular input "file_meta_data" defined inside the app "ntst_app_file_meta_data": Introspecting scheme=file_meta_data: script running failed (exited with code 1).
doing a search for index=_internal ExecProcessor "file_meta_data" sourcetype=splunkd yields no results for this host
doing a search for index=_internal sourcetype=file_meta_data_modular_input also yields no results for this host
it is acting like it is unable to run the python script.
Any thoughts on how to fix or troubleshoot?
↧