Splunk App for AWS compatibility

Applicability

Description

Issue reported:
Unable to access Machine Learning Toolkit even after installing Splunk_SA_Scientific_Python_linux_x86_64 version 2.0.0 and above

Investigation

Trying to access machine learning toolkit app post implementing the workaround provided from the following link Hardware and software requirements but still unable to access the app
 

Admin would like to use Splunk app for AWS and well as Machine Learning Toolkit app on a single instance but Splunk app for AWS requires Splunk_SA_Scientific_Python_linux_x86_64 Version 1.2 , whereas Machine Learning Toolkit app requires Splunk_SA_Scientific_Python_linux_x86_64 version 2.0.0 and above.

 

Implement the steps

Hardware and software requirements
 

1. Append _awsapp to the end of the package name. For example, if the package name is Splunk_SA_Scientific_Python_linux_x86_64, rename it to Splunk_SA_Scientific_Python_linux_x86_64_awsapp.

2. In the Python for Scientific Computing package, create app.conf in the /local/ directory.

3. Open app.conf and add a [package] stanza with an id parameter that contains the new package name. If your package name is different than the following example, change it first.

[package]
id = Splunk_SA_Scientific_Python_linux_x86_64_awsapp

But admin is still facing the issue he is able to access Splunk app for AWS but unable to access Machine learning toolkit app.

Tried to uninstall machine learning toolkit app and the Splunk_SA_Scientific_Python_linux_x86_64 app and tried to implement the workaround steps first and then tried to install one after the other but still issue persists.

Resolution

The two versions are getting confused with each other, I suggest d
1. Delete all of the Splunk_SA_Scientific_Python_linux_x86_64 apps in the $SPLUNK_HOME/etc/apps folder first.

2. Then instead of installing  from the user interface, download and extract the Splunk_SA_Scientific_Python_linux_x86_64.tar.gz (both versions) in the $SPLUNK_HOME/etc/apps folder.


Rename accordingly (very similar to the docs just adding a prefix instead of a suffix):

• Make sure nothing changes in the Splunk_SA_Scientific_Python_linux_x86_64 version 2.0.0 after installation or extraction.

• Change the name of the Splunk_SA_Scientific_Python_linux_x86_64 version 1.2.0 to *awsapp_*Splunk_SA_Scientific_Python_linux_x86_64

• Inside *awsapp_*Splunk_SA_Scientific_Python_linux_x86_64 create a folder called local. Or if local folder exists skip this step.

• Inside the local folder create an app.conf file add these line inside the file and save:

[package]
id = awsapp_Splunk_SA_Scientific_Python_darwin_x86_64

After performing the above changes you'll be able to access both the machine learning toolkit app as well as AWS app

Related Links