Splunk Search

TA_browscap add-on giving an error when performing a lookup

drih
Observer

Hello

version 9.0.0

We are using v1.2 of the browscap add-on and are having issues with it performing searches.  The add-on has been installed on both the search heads and the indexers via the cluster manager. 

"When running a search the error [inder1, indexer2, indexer3] Streamed search execute failed because: Error in 'lookup' command: Script execution failed for external search command <search head>/apps/TA-browscap/bin/browscap_lookup.py'.."

There are no other errors in the _internal index or in any of the splunk logs on either the search heads or indexers.

 

Any idea

Labels (1)
0 Karma

m_pham
Splunk Employee
Splunk Employee

I'd check with the developer of the add-on if it can run with Python3 since you're running Splunk v9.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...