search

scalyr / dataset-addon-for-splunk

The DataSet Add-on for Splunk provides integration with
Apache License 2.0
3 stars 10 forks source link

ModuleNotFoundError for "dataset_api" on version 2.0.71 #142

Closed epic-david closed 1 month ago

epic-david commented 1 month ago

Error in search.log below, search fails with generic "Error in 'dataset' command: External search command exited unexpectedly with non-zero error code 1."

08-05-2024 19:41:20.615 INFO  SearchParser [265297 searchOrchestrator] - PARSING: |dataset method=powerquery maxcount=5000 search="event.type=* | group total = count() by event.type"\n|spath\n|table event.type,total
08-05-2024 19:41:20.616 INFO  ServerConfig [265297 searchOrchestrator] - Will add app jailing prefix /opt/splunk/bin/nsjail-wrapper for TA-dataset
08-05-2024 19:41:20.616 INFO  ChunkedExternProcessor [265297 searchOrchestrator] - Running process: /opt/splunk/bin/nsjail-wrapper /opt/splunk/bin/python3.7 /opt/splunk/etc/apps/TA-dataset/bin/dataset_search_command.py
08-05-2024 19:41:20.772 ERROR ChunkedExternProcessor [265309 ChunkedExternProcessorStderrLogger] - stderr: Traceback (most recent call last):
08-05-2024 19:41:20.772 ERROR ChunkedExternProcessor [265309 ChunkedExternProcessorStderrLogger] - stderr:   File "/opt/splunk/etc/apps/TA-dataset/bin/dataset_search_command.py", line 14, in <module>
08-05-2024 19:41:20.772 ERROR ChunkedExternProcessor [265309 ChunkedExternProcessorStderrLogger] - stderr:     from dataset_api import (
08-05-2024 19:41:20.772 ERROR ChunkedExternProcessor [265309 ChunkedExternProcessorStderrLogger] - stderr: ModuleNotFoundError: No module named 'dataset_api'
08-05-2024 19:41:20.783 ERROR ChunkedExternProcessor [265297 searchOrchestrator] - EOF while attempting to read transport header read_size=0
08-05-2024 19:41:20.783 ERROR ChunkedExternProcessor [265297 searchOrchestrator] - Error in 'dataset' command: External search command exited unexpectedly with non-zero error code 1.
epic-david commented 1 month ago

Disregard, this was an issue due to trying to upgrade over and old version of the app with root folder "TA-dataset"