Unable to run python script with inputs.conf, getting below errors
03-21-2019 10:11:03.474 -0400 ERROR ExecProcessor - message from "python $Splunk_home/etc/apps/XX/bin/X.py" File "$Splunk_home/etc/apps/XX/bin/X.py", line 100, in
03-21-2019 10:11:03.474 -0400 ERROR ExecProcessor - message from "python $Splunk_home/etc/apps/XX/bin/X.py" fileIo = open(logFile,'w')
03-21-2019 10:11:03.474 -0400 ERROR ExecProcessor - message from "python $Splunk_home/etc/apps/XX/bin/X.py" IOError: [Errno 13] Permission denied: u'.//21_03_2019-10_11_02-datafeed.json'
But I can run script manually. $Splunk_home/bin/splunk cmd python $Splunk_home/etc/apps/XX/bin/X.py
Hi jayakumar19,
Usually I do this to test/troubleshoot scripts in Splunk:
$SPLUNK_HOME/bin/splunk cmd /bin/bash
This will start a shell session with all Splunk environment settings. Then I start the script like this:
$SPLUNK_HOME/bin/splunk cmd $SPLUNK_HOME/etc/apps/XX/bin/X.py
This helps a lot to understand where and/or why scripts fail to run.
In addition I add logging lines into the script that will tell me variables being used and which step is being processed. You can add them like this:
logging.debug('what ever you want to show in the logfile')
Hope that helps ...
cheers, MuS
Hi,
Are you running script manually with same user as splunk process is running ?
Thanks Harsmarvania for looking into it. Yes I am running it as splunk user.
Based on logs which you have provided it is saying that splunk process which is running as splunk user doesn't have permission to read 21_03_2019-10_11_02-datafeed.json
file.
Actually script is trying to create that file. Manual run is able to create new file.
That's strange, in which directory splunk tries to create file using that script ?