At the time this article was written, the FlashBlade Add-on for Splunk works until Splunk Enterprise versions prior to 8.1 and will throw the following error on Splunk 8.1+.
The splunkd.log file might show similar messages as below.
04-23-2021 09:36:31.765 -0700 ERROR ModularInputs - Introspecting scheme=purestorage_flashblade: script running failed (exited with code 1). 04-23-2021 09:36:31.765 -0700 ERROR ModularInputs - Unable to initialize modular input "purestorage_flashblade" defined in the app "TA-ps_flashblade": Introspecting scheme=purestorage_flashblade: script running failed (exited with code 1)..
- PureStorage FlashBlade Add-on (version 1.0.2) for Splunk on Splunk Enterprise versions starting 8.1.0.
The reason for this error is that the FlashBlade Add-on only supports Python 2 and is not compatible with Python 3. Starting with Splunk 8.1, Python3 is the default interpreter, and hence any technology add-ons or Splunk apps that are developed for Python2 has to be updated to support Python3.
We are working with the vendor who developed this Add-on to support Python3.
Meanwhile, follow the below workaround which would allow the customer to run the FlashBlade Add-on under Python2 interpreter on Splunk 8.1+.
Note: This is only a workaround. Please look for the updated version of this Add-on that will support Python 3.
Update the following two files (input.conf, restmap.conf) under
$SPLUNK_HOME/etc/apps/TA-ps_flashblade/default directory with the following entry to force the Python2.7 interpreter for this Add-on and restart the Splunk instance.
python.version = python2
1) The updated inputs.conf should look like the following.
[purestorage_flashblade] start_by_shell = false sourcetype = purestorage:flashblade:array interval = 300 disabled = 0 python.version = python2
2) The updated restmap.conf should look like the following.
[admin:TA_ps_flashblade] match = / members = TA_ps_flashblade_settings, TA_ps_flashblade_purestorage_flashblade, TA_ps_flashblade_account [admin_external:TA_ps_flashblade_settings] handlertype = python handlerfile = TA_ps_flashblade_rh_settings.py handleractions = edit, list python.version = python2 [admin_external:TA_ps_flashblade_purestorage_flashblade] handlertype = python handlerfile = TA_ps_flashblade_rh_purestorage_flashblade.py handleractions = edit, list, remove, create python.version = python2 [admin_external:TA_ps_flashblade_account] handlertype = python handlerfile = TA_ps_flashblade_rh_account.py handleractions = edit, list, remove, create python.version = python2
3) Restart the splunk instance.