All Apps and Add-ons

Splunk salesforce addon ERROR : GlobalConfigError: Config Not Found for Input

jadengoho
Builder

I am new in to Salesforce thing , and i am getting this error:

ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_object.py" GlobalConfigError: Config Not Found for Input, input_type=sfdc_object, input_name=salesforce_trial, config_type=account, config_name

What Input is this referring for ?
What does it trigger ?
And possible how to solve this ?

0 Karma

hmaldonado_splu
Splunk Employee
Splunk Employee

I just resolved a case where the customer was having this same error message. The issue was that they could not collect any data with the TA for Salesforce 1.0 and Splunk Enterprise 7.1 AMI. I noticed that the account name that the customer created within the context of the TA was the same as the username being used to access Salesforce. We made sure to enter a different account name than the one being used as the username to access Salesforce and that there were no special characters present. Previously, the customer had configured johndoe@blahblah.com as the account name while this was also the username of the Salesforce account.

Remove any special characters from the account name and make sure that the account name is different than the username.

Regards,
Hans
Edit: I have also seen this error occur when a customer splits the add-on for Salesforce package into multiple folders. The TA is looking for some configuration in a particular place, and it throws the above referenced error when it cannot find whatever configuration it was looking for.

0 Karma

KarunK
Contributor

I am also having the same problem ?

Has anyone managed to resolve this issue ?

*Salesforce URL : abc--DEV1.c6.my.salesforce.com
Username : splunkintegrationuser@anc.com.dev1
*

07-10-2018 15:00:25.371 +1000 INFO ExecProcessor - New scheduled exec process: python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py" Traceback (most recent call last):
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py"   File "/opt/splunk/etc/apps/Splunk_TA_salesforce/bin/splunk_ta_salesforce/modinput_wrapper/base_modinput.py", line 113, in stream_events
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py"     self.parse_input_args(input_definition)
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py"   File "/opt/splunk/etc/apps/Splunk_TA_salesforce/bin/splunk_ta_salesforce/modinput_wrapper/base_modinput.py", line 152, in parse_input_args
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py"     self._parse_input_args_from_global_config(inputs)
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py"   File "/opt/splunk/etc/apps/Splunk_TA_salesforce/bin/splunk_ta_salesforce/modinput_wrapper/base_modinput.py", line 171, in _parse_input_args_from_global_config
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py"     ucc_inputs = global_config.inputs.load(input_type=self.input_type)
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py"   File "/opt/splunk/etc/apps/Splunk_TA_salesforce/bin/splunk_ta_salesforce/splunktaucclib/global_config/configuration.py", line 279, in load
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py"     self._references,
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py"   File "/opt/splunk/etc/apps/Splunk_TA_salesforce/bin/splunk_ta_salesforce/splunktaucclib/global_config/configuration.py", line 300, in _reference
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py"     configs
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py"   File "/opt/splunk/etc/apps/Splunk_TA_salesforce/bin/splunk_ta_salesforce/splunktaucclib/global_config/configuration.py", line 332, in _input_reference
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py"     config_name=config_name
07-10-2018 15:00:27.501 +1000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/Splunk_TA_salesforce/bin/sfdc_event_log.py" GlobalConfigError: Config Not Found for Input, input_type=sfdc_event_log, input_name=event_log, config_type=account, config_name=splunkintegrationuser@anc.com.dev1
0 Karma

KarunK
Contributor

Hi jadengoho,

G'day. have you managed to resolve this issue ?

Thanks

kkn

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...