Installed REST API Modular input on Splunk 6.0 Search Head Pool and receives the following error messages even after restarting Splunk.
Unable to initialize modular input "rest" defined inside the app "rest_ta": Introspecting scheme=rest: script running failed (exited with code 1).
In the rest.py file the SPLUNK_HOME environment variable is used
EGG_DIR = SPLUNK_HOME + "/etc/apps/rest_ta/bin/"
It is most likely that in your pool, the app was not located under the SPLUNK_HOME folder as per pooling config.
In the rest.py file the SPLUNK_HOME environment variable is used
EGG_DIR = SPLUNK_HOME + "/etc/apps/rest_ta/bin/"
It is most likely that in your pool, the app was not located under the SPLUNK_HOME folder as per pooling config.
That works! Thanks a lot!
There is a known bug with Splunk 6 that is caused by the DB Connect App.
If you have this app installed , it causes all other Modular Inputs to not show up on the Manager->Data Inputs page
Although the Modular Inputs are installed and working fine and can still be navigated to manually :
http://YOURSPLUNKHOST:8000/en-US/manager/launcher/data/inputs/rest
Yes we are using DB Connect.
Do you happen to have DB Connect installed ?
The errors went away but I still don't see REST in "Settings>Data Inputs" just like in your documentation.
Thank you very much for your help by the way!