After install App for Stream, got the error message from the UI.
Unable to initialize modular input "streamfwd" defined inside the app "Splunk_TA_stream"
From the log, got this error message.
06-24-2018 12:39:00.268 +0800 ERROR ModularInputs - Introspecting scheme=streamfwd: script running failed (killed by signal 6: Aborted).
06-24-2018 12:39:00.268 +0800 ERROR ModularInputs - Unable to initialize modular input "streamfwd" defined inside the app "Splunk_TA_stream": Introspecting scheme=streamfwd: script running failed (killed by signal 6: Aborted).
You can run below command to check the streamfwd version.
/opt/splunk/etc/apps/Splunk_TA_stream/linux_x86_64/bin
terminate called after throwing an instance of 'std::runtime_error'
what(): locale::facet::_S_create_c_locale name not valid
Aborted (core dumped)
If you got the same error about locale, try to export the LC_ALL="en_US.UTF-8" before you start splunk.
For example,
/opt/splunk/bin