Hi all,
we have deployed the file_meta_data app on one of our universal forwarders running on windows 2012R2 because we want to monitor the file size for a specific file.
The inputs.conf looks like this
[file_meta_data://Trendmicro]
file_hash_limit = 300MB
file_path = C:\Program Files\Trend\SProtect\x64\SpntLog\SpntLog.dbf
include_file_hash = 0
index = egg_win_prod_90
interval = 1m
only_if_changed = 0
recurse = 1
sourcetype = File_Metadata
disabled=0
but it's not working. In the Splunkd.log i see the following error.
The file
2-27-2018 11:34:25.499 +0100 ERROR ModularInputs - Introspecting scheme=file_meta_data: Unable to run "python "C:\Program Files\SplunkUniversalForwarder\etc\apps\file_meta_data\bin\file_meta_data.py" --scheme": child failed to start: The system cannot find the file specified.
02-27-2018 11:34:25.499 +0100 ERROR ModularInputs - Unable to initialize modular input "file_meta_data" defined inside the app "file_meta_data": Introspecting scheme=file_meta_data: Unable to run "python "C:\Program Files\SplunkUniversalForwarder\etc\apps\file_meta_data\bin\file_meta_data.py" --scheme": child failed to start: The system cannot find the file specified.
Has anyone an idea why we are getting this error?
Thanks
Alex
↧