Skip to main content
Pure Technical Services

FlashBlade Add-on for Splunk not working on Splunk 8.1+

Currently viewing public documentation. Please login to access the full scope of documentation.

Symptoms

At the time this article was written, the FlashBlade Add-on for Splunk works until Splunk Enterprise versions prior to 8.1 and will throw the following error on Splunk 8.1+.

splunk_error.png

The splunkd.log file might show similar messages as below.

04-23-2021 09:36:31.765 -0700 ERROR ModularInputs - Introspecting scheme=purestorage_flashblade: script running failed (exited with code 1).
04-23-2021 09:36:31.765 -0700 ERROR ModularInputs - Unable to initialize modular input "purestorage_flashblade" defined in the app "TA-ps_flashblade": Introspecting scheme=purestorage_flashblade: script running failed (exited with code 1)..

Applies to

  • PureStorage FlashBlade Add-on (version 1.0.2) for Splunk on Splunk Enterprise versions starting 8.1.0.

Cause

The reason for this error is that the FlashBlade Add-on only supports Python 2 and is not compatible with Python 3. Starting with Splunk 8.1, Python3 is the default interpreter, and hence any technology add-ons or Splunk apps that are developed for Python2 has to be updated to support Python3. 

Resolution

We are working with the vendor who developed this Add-on to support Python3. 

Meanwhile, follow the below workaround which would allow the customer to run the FlashBlade Add-on under Python2 interpreter on Splunk 8.1+.

Note: This is only a workaround.  Please look for the updated version of this Add-on that will support Python 3.

Workaround

Update the following two files (input.conf, restmap.conf) under $SPLUNK_HOME/etc/apps/TA-ps_flashblade/default directory with the following entry to force the Python2.7 interpreter for this Add-on and restart the Splunk instance.

python.version = python2

1) The updated inputs.conf should look like the following.

[purestorage_flashblade]
start_by_shell = false
sourcetype = purestorage:flashblade:array
interval = 300
disabled = 0
python.version = python2

2) The updated restmap.conf should look like the following.

[admin:TA_ps_flashblade]
match = /
members = TA_ps_flashblade_settings, TA_ps_flashblade_purestorage_flashblade, TA_ps_flashblade_account

[admin_external:TA_ps_flashblade_settings]
handlertype = python
handlerfile = TA_ps_flashblade_rh_settings.py
handleractions = edit, list
python.version = python2

[admin_external:TA_ps_flashblade_purestorage_flashblade]
handlertype = python
handlerfile = TA_ps_flashblade_rh_purestorage_flashblade.py
handleractions = edit, list, remove, create
python.version = python2

[admin_external:TA_ps_flashblade_account]
handlertype = python
handlerfile = TA_ps_flashblade_rh_account.py
handleractions = edit, list, remove, create
python.version = python2

3) Restart the splunk instance.