Alerting

Python Alert Script not running when using pyodbc

bruceclarke
Contributor

All,

I ran into an issue with my python alert script after trying to import pyodbc into my script. I read elsewhere that it might be due to Splunk's version of python not being able to import pyodbc. So, I created a wrapper python script as described here: http://answers.splunk.com/answers/10839/scripted-lookup-script-doesnt-work-with-splunk-python-versio....

When I run

splunk cmd python "path/to/python/wrapper"
everything works fine. I see the output and it sends an email as I expected. However, when the alert gets triggered by Splunk, the script fails. I see the following error in splunkd.log:

02-11-2014 20:04:05.573 -0500 WARN  script - Maxinputs must be at least 10000, command name="runshellscript"

Any ideas on how to fix this? Thanks!

Tags (3)
0 Karma
1 Solution

bruceclarke
Contributor

There were two versions of python on the machine. This led to a conflict that was masked by a hard to decipher error message in Splunk.

View solution in original post

0 Karma

bruceclarke
Contributor

There were two versions of python on the machine. This led to a conflict that was masked by a hard to decipher error message in Splunk.

0 Karma

bruceclarke
Contributor

Oh, and just to be clear, the script runs fine if I remove the reference to pyodbc and skip my table lookup (ultimately, though, I need to make this call).

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...