Streamed search execute failed because: Error in 'sendtoubakafka' - module 'time' has no attribute 'clock'
Available Languages
Applicability
Splunk Enterprise Splunk UBADescription
Splunk Data source search status check displays the following error for Indicator Values.
HTTP 400 - Error in 'sendtoubakafka' command: (AttributeError) module 'time' has no attribute 'clock'
The app stopped working and the error above was showing every time it was executed the app.
Investigation
While reviewing the error message and after determining that the issue began after upgrading Splunk, the best option was to confirm if this current app is supported by Splunk 9.3.2. The app was 1.4.2 this version is a bit older, so the Splunk current version was affecting its functionality.
Resolution
Go to Splunkbase find the app and look for the newest version > Search the combability tab > Confirm the compatibility with Splunk Enterprise and its version.
After upgrading the Kafka-addon the error stopped showing and the stream search started working as expected.
Related Links
Splunk Base - Splunk UBA Kafka Ingestion App
UBA Compatibility - Reference.
Splunk Help - Reference.
Revision History
| Revision | Publish Date | Comments |
|---|---|---|
1.0 |
29-Sep-2026
|
Initial Release |
FeedbackContact Cisco
- Open a Support Case
- (Requires a Cisco Service Contract)
This Document Applies to These Products
Related Articles
- Error in 'spathannotations' command: (AttributeError) module 'time' has no attribute 'clock'.
- Streamed search execute failed because: Error in 'mcincidentsstream' command
- Splunk Security Essential(SSE): Data Inventory Overview page failing with Error message: "Error in 'sseidenrichment' command: (AttributeError) module 'time' has no attribute 'clock'"
- Splunk Security Essential(SSE): CIM Compliance Check page failing with Error messageError in 'sseidenrichment' command: (AttributeError) module 'time' has no attribute 'clock'