All Apps and Add-ons

Unable to initialize modular input "rest" defined inside the app "rest_ta"

jeffreygaraygay
Explorer

Installed REST API Modular input on Splunk 6.0 Search Head Pool and receives the following error messages even after restarting Splunk.

Unable to initialize modular input "rest" defined inside the app "rest_ta": Introspecting scheme=rest: script running failed (exited with code 1).

Tags (1)
0 Karma
1 Solution

Damien_Dallimor
Ultra Champion

In the rest.py file the SPLUNK_HOME environment variable is used

EGG_DIR = SPLUNK_HOME + "/etc/apps/rest_ta/bin/"

It is most likely that in your pool, the app was not located under the SPLUNK_HOME folder as per pooling config.

View solution in original post

Damien_Dallimor
Ultra Champion

In the rest.py file the SPLUNK_HOME environment variable is used

EGG_DIR = SPLUNK_HOME + "/etc/apps/rest_ta/bin/"

It is most likely that in your pool, the app was not located under the SPLUNK_HOME folder as per pooling config.

jeffreygaraygay
Explorer

That works! Thanks a lot!

0 Karma

Damien_Dallimor
Ultra Champion

There is a known bug with Splunk 6 that is caused by the DB Connect App.

If you have this app installed , it causes all other Modular Inputs to not show up on the Manager->Data Inputs page

Although the Modular Inputs are installed and working fine and can still be navigated to manually :

http://YOURSPLUNKHOST:8000/en-US/manager/launcher/data/inputs/rest

jeffreygaraygay
Explorer

Yes we are using DB Connect.

0 Karma

Damien_Dallimor
Ultra Champion

Do you happen to have DB Connect installed ?

0 Karma

jeffreygaraygay
Explorer

The errors went away but I still don't see REST in "Settings>Data Inputs" just like in your documentation.

Thank you very much for your help by the way!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...