Hi,
I'm currently running Splunk Enterprise 6.4.3 on Windows 2012r2, almost everything running smoothly except EMC Isilon App & Add-On.
I'm currently trying to solve why I'm unable to get these apps working properly.
I have install both Application EMC Isilon Add-on for Splunk Enterprise & EMC Isilon App for Splunk Enterprise.
I have configure the Add-on, using IP of one Node of my Isilon Cluster and using Admin account. Configuration look simple and don't give any error message.
I did not see any sourcetype from EMC in Splunk, **emc:isilon:rest or emc:isilon:syslog**
I'm troubleshooting the problem using : index=_internal component="ExecProcessor" "EMC Isilon Error:" and here what I see:
*message from "python "C:\Program Files\Splunk\etc\apps\TA_EMC-Isilon\bin\isilon.py"" EMC Isilon Error: Could not get TA_EMC-Isilon credentials from splunk. Error: 'str' object has no attribute 'os_startIndex'*
*message from "python "C:\Program Files\Splunk\etc\apps\TA_EMC-Isilon\bin\isilon.py"" EMC Isilon Error: Error while getting session validity for authentication. EMC Isilon Error: Could not get TA_EMC-Isilon credentials from splunk. Error: 'str' object has no attribute 'os_startIndex'*
*message from "python "C:\Program Files\Splunk\etc\apps\TA_EMC-Isilon\bin\isilon.py"" EMC Isilon Error: Looks like an error while getting count for endpoint 401 Client Error: Authorization Required : https://xxx.xxx.xxx.xxx:8080/platform/1/statistics/current?key=node.sensor.fan.rpms.$get_count$&devid=all *
These two errors message came back constently and not data from Isilon is in Splunk.
Thanks
↧
