Every hour I receive the error:
msg="A script exited abnormally" input="./bin/collector.path" stanza="default" status="exited with code 24
Looking in data inputs -> scripts, I see that collector.path comes from app "introspection_generator_addon"
It indeed is in /opt/splunk/etc/apps/introspection_generator_addon/bin and has the line:
$SPLUNK_HOME/bin/splunkd" instrument-resource-usage
But I don't think the issue comes from there. Continuing to investigate the logs, in splunkd.log i see:
configuration_check.log:2015-12-02 18:00:00,237 ERROR pid=25487 tid=MainThread file=configuration_check.py:run:160 | status="completed" task="confcheck_script_errors" message="msg="A script exited abnormally" input="./bin/collector.path" stanza="default" status="exited with code 24""
Doing a find of configuration_check.py, I see it coming from:
/opt/splunk/etc/apps/SA-Utils/bin/configuration_check.py
which is an app installed with Splunk Enterprise Security.
When running the script, I get:
python /opt/splunk/etc/apps/SA-Utils/bin/configuration_check.py
Traceback (most recent call last):
File "/opt/splunk/etc/apps/SA-Utils/bin/configuration_check.py", line 14, in
from splunk.appserver.mrsparkle.lib.util import make_splunkhome_path
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/__init__.py", line 13, in
from splunk.clilib import bundle_paths
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/bundle_paths.py", line 6, in
import splunk.clilib.cli_common as comm
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli_common.py", line 6, in
import lxml.etree as etree
ImportError: /usr/lib64/libxml2.so.2: version `LIBXML2_2.9.0' not found (required by /opt/splunk/lib/python2.7/site-packages/lxml/etree.so)
Checking the install version of libxml2 on the system:
rpm -qa | grep libxml
libxml2-2.7.6-20.el6.x86_64
libxml2-python-2.7.6-20.el6.x86_64
So is the script faling due to the version of libxml2?
The system running is a RHEL 6.5 and no version 2.9.0 is available.
... View more