Splunk Search

Why is the splunkweb service not starting and getting "ImportError: No module named lookupfiles"?

brdr
Contributor

Hi Splunk,

The splunkweb service is not starting. Here is entry in the log:

Any ideas?

2016-07-19 14:42:13,921 ERROR   [578e7485507f6a9721b510] root:816 - Unable to start splunkweb
2016-07-19 14:42:13,921 ERROR   [578e7485507f6a9721b510] root:817 - No module named lookupfiles
Traceback (most recent call last):
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/root.py", line 101, in 
    from controllers.top import *
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/top.py", line 13, in 
    from admin import AdminController
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/admin.py", line 17, in 
    from splunk.appserver.mrsparkle.controllers.appinstall import AppInstallController
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/appinstall.py", line 9, in 
    from splunk.appserver.mrsparkle.lib import cached, module
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 465, in 
    moduleMapper = ModuleMapper()
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 79, in __init__
    self.installedModules = self.getInstalledModules()
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 24, in helper
    return f(*a, **kw)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 448, in getInstalledModules
    mods = self.getModuleList(root)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 33, in helper
    return f(*a, **kw)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 219, in getModuleList
    mod = __import__(modname)
  File "/opt/splunk/etc/slave-apps/SA-Utils/appserver/modules/SOLNLookupEditor/SOLNLookupEditor.py", line 22, in 
    import lookupfiles
ImportError: No module named lookupfiles
2016-07-19 15:20:21,793 INFO    [578e7d75b77f9f6aa274d0] __init__:168 - Using default logging config file: /opt/splunk/etc/log.cfg
2016-07-19 15:20:21,794 INFO    [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk level=INFO
2016-07-19 15:20:21,794 INFO    [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.appserver level=INFO
2016-07-19 15:20:21,794 INFO    [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.appserver.controllers level=INFO
2016-07-19 15:20:21,795 INFO    [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.appserver.controllers.proxy level=INFO
2016-07-19 15:20:21,795 INFO    [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.appserver.lib level=WARN
2016-07-19 15:20:21,795 INFO    [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.pdfgen level=INFO
0 Karma
1 Solution

Heff
Splunk Employee
Splunk Employee

I saw this about replacing "apps" with "slave-apps" in make_splunkhome_path function in files below?

https://answers.splunk.com/answers/305921/why-is-splunkweb-is-not-starting-on-indexers-with.html

View solution in original post

0 Karma

Heff
Splunk Employee
Splunk Employee

I saw this about replacing "apps" with "slave-apps" in make_splunkhome_path function in files below?

https://answers.splunk.com/answers/305921/why-is-splunkweb-is-not-starting-on-indexers-with.html

0 Karma

brdr
Contributor

Thanks Heff.

I followed the post above, restarted splunk on the indexer that the web service was failing, and all is well.

Couple of things. The other indexer in the cluster didn't experience this issue when cluster bundle was applied to both. It was the NetApp ONTAP app (SA-Utils, SA-Hydra) that I was pushing when I ran into this issue.

NOTE:
There are dozens of files in these SAs that contain the word "apps" and not "slave-apps" when defining path.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...