Dashboards & Visualizations

No data in app, Python exception: KeyError: 'server'

halr9000
Motivator

None of the app dashboards are populating. When searching "index=_internal Collect.py", I see the following error:

Traceback (most recent call last):
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_CiscoUCS\bin\Collect.py", line 53, in <module>
  managers = [m for m in DictReader(f) if fnmatch(m['server'], args.manager)]
KeyError: 'server'

Splunk version Splunk 6.0 (build 182037)

Platform Windows x64

Physical Memory (GB) 8.0

Number of CPU cores 8

$SPLUNK_HOME C:\Program Files\Splunk

(Asking this on behalf of a customer.)

0 Karma

halr9000
Motivator

The scripts throws when trying to parse managers.csv. This isn't a file not found/can't read error, so it's not permissions or filename type of issue, it's the content of the file. Perhaps the header is missing or altered? The sample included with the app looks like this:

server,realm
server1,production
server2,development
0 Karma

halr9000
Motivator

It's already parsed credentials by this point, so that file (credentials.csv) is ok

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...