Errormin web ui

[saravanakumar-subbiah]

I am getting error message. while i open AD

Unable to initialize modular input "azure_virtual_network" defined in the app "TA-MS-AAD": Introspecting scheme=azure_virtual_network: script running failed (exited with code 1).. 7/26/2022, 12:48:39 PM

Error: Request failed with status code 500 in webui, any help ?

[JasonConger]

Was this an in-place upgrade or a clean install?

[saravanakumar-subbiah]

Clean Install only. After downgrade to 3.1 it is working. On 27-Jul-2022 4:16 am, Jason Conger ***@***.***> wrote: Was this an in-place upgrade or a clean install? — Reply to this email directly, view it on GitHub<https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsplunk%2Fsplunk-add-on-microsoft-azure%2Fissues%2F8%23issuecomment-1196054447&data=05%7C01%7Csaravanakumar%40fourdtech.com%7C61c98944c0a942adaba008da6f58b393%7C35f28f9c6c1a4896b61778fceeda2d4b%7C0%7C0%7C637944724028650682%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=OJz5wTNQLmplssqdezyHsDQw6nuUd5Yng%2FoCyoAdiAA%3D&reserved=0>, or unsubscribe<https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAQADO5N2GCNRTHMCTBXEI33VWBTEZANCNFSM54U2YDCA&data=05%7C01%7Csaravanakumar%40fourdtech.com%7C61c98944c0a942adaba008da6f58b393%7C35f28f9c6c1a4896b61778fceeda2d4b%7C0%7C0%7C637944724028650682%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=E94rQzfdpDFQP8RjX3Ge2dCh095YxyhOE7BHfyD%2FIjU%3D&reserved=0>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[JasonConger]

What OS and Splunk version are you using?

[saravanakumar-subbiah]

Windows 2012 server Splunk 9.0 Saravanakumar. S Manager - Security Operations Hand Phone:8754485958 From: Jason Conger ***@***.***> Sent: Wednesday, July 27, 2022 9:05 AM To: splunk/splunk-add-on-microsoft-azure ***@***.***> Cc: Saravana Kumar ***@***.***>; Author ***@***.***> Subject: Re: [splunk/splunk-add-on-microsoft-azure] Errormin web ui (Issue #8) What OS and Splunk version are you using? - Reply to this email directly, view it on GitHub<https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsplunk%2Fsplunk-add-on-microsoft-azure%2Fissues%2F8%23issuecomment-1196227365&data=05%7C01%7Csaravanakumar%40fourdtech.com%7Cf4759db82cf54b9ac1f908da6f80ebe5%7C35f28f9c6c1a4896b61778fceeda2d4b%7C0%7C0%7C637944896792857588%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=JZOUqfivwvGUnuueAYTrg8Rov%2B22kSW%2FapXvBkJvtL0%3D&reserved=0>, or unsubscribe<https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAQADO5PYB4FO5IW3X3N7SEDVWCU4PANCNFSM54U2YDCA&data=05%7C01%7Csaravanakumar%40fourdtech.com%7Cf4759db82cf54b9ac1f908da6f80ebe5%7C35f28f9c6c1a4896b61778fceeda2d4b%7C0%7C0%7C637944896792857588%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=VdVoAbB6h0Kr8tZvtPLaiteYiwnsELP0qF3g6CDlXJw%3D&reserved=0>. You are receiving this because you authored the thread.Message ID: ***@***.******@***.***>>

[JasonConger]

The root cause has been identified as a Python module import.

Workaround:

1. Open the file import_declare_test.py located in $SPLUNK_HOME/etc/apps/TA-MS-AAD/bin
2. Comment out the import pwd line. It should look like this:

import os
#import pwd
import sys

3. Restart Splunk

[saravanakumar-subbiah]

Still I am seeing this error . Saravanakumar. S Manager - Security Operations Hand Phone:8754485958 From: Jason Conger ***@***.***> Sent: Wednesday, August 10, 2022 10:20 PM To: splunk/splunk-add-on-microsoft-azure ***@***.***> Cc: Saravana Kumar ***@***.***>; Author ***@***.***> Subject: Re: [splunk/splunk-add-on-microsoft-azure] Errormin web ui (Issue #8) The root cause has been identified as a Python module import. Workaround: 1. Open the file import_declare_test.py located in $SPLUNK_HOME/etc/apps/TA-MS-AAD/bin 2. Comment out the import pwd line. It should look like this: import os #import pwd import sys 1. Restart Splunk - Reply to this email directly, view it on GitHub<https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fsplunk%2Fsplunk-add-on-microsoft-azure%2Fissues%2F8%23issuecomment-1210983960&data=05%7C01%7Csaravanakumar%40fourdtech.com%7C39ec1019df0e46bfd6e608da7af05f5c%7C35f28f9c6c1a4896b61778fceeda2d4b%7C0%7C0%7C637957470075704773%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=jMZKlvWF4K4f81NNteiCUP131SYO9aaVNahKfx5DVXw%3D&reserved=0>, or unsubscribe<https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAQADO5NYFAZ6IEE67JE322LVYPMTTANCNFSM54U2YDCA&data=05%7C01%7Csaravanakumar%40fourdtech.com%7C39ec1019df0e46bfd6e608da7af05f5c%7C35f28f9c6c1a4896b61778fceeda2d4b%7C0%7C0%7C637957470075704773%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=J%2Bu3ZhvuqkQAfeHjxlX2N%2BYagR9JfC1nEML%2BYouzfJ8%3D&reserved=0>. You are receiving this because you authored the thread.Message ID: ***@***.******@***.***>>

[JasonConger]

Addressed in 4.0.3