Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Kiwi - Palo Alto User ID agent

I have written a perl script to take data from Kiwi, parse out some information and pass it into our Palo Alto UserID agent. It runs fine when I pass the message in on the command line but when I have kiwi run it (so to pull the data from kiwi) it fails with an error:

Error Info: invalid charater on line 1

My script looks like this:

sub Main() {
use PAN::API;
$string = Fields.VarCleanMessageText;
$SERVER = '127.0.0.1';
#Extract user and IP from string
if ($string =~ /(\w+)([.+]|(\s))(\w+)(\s|\+|.)(\d+\.\d+\.\d+\.\d+)/) {
       $delim = ($3 eq "+") ? " " : $3;
       $username = "$1\\$2$delim$5";
       $ip_address = $7;
}
print "$username : $ip_address \n";
# Create User ID API connection
$uid=PAN::API::UID->new($SERVER);
#Post data to agent
$uid->add('login',$name,$address);
$uid->submit();
return "OK"; #return value for Kiwi
}

Thanks for any guidance.

Kevin

Find more posts tagged with

Accepted answers

All comments

FormerMember

It is complaining about my curly brace {.... ????

Thanks for any help...

Kevin

Aforsythe

I haven't quite figured out the particulars of the error handling in kiwi yet, but just because it says "line 1" doesn't mean the error is on line 1, in this case, I think it might be... try removing the () for sub Main and see if that makes a difference.

ktjinesh

Which Windows OS you are using? x64 or x86.

In both cases, you have to install ActivePerl 5.16.2 x86 installer (32 bit installer).

Try this. I hope this will help.

Jinesh

FormerMember

I am using Windows 2008 x64 with ActivePerl 5.16.2 build 1602 64-bit.

gmf2013

have you figured this one out?

FormerMember

The original error seemed to be (as noted by Jinesh below) that I had Active State 64 bit installed. Now I am getting another error regarding the use PAN::API; line when I import the module for communicating with the PAN UID agent. I have had a case open for several weeks with customer support but they have been awful about helping me. They confirmed the 64 bit but I had to ask them directly. Then I send this new error and just crickets. Not only are we Kiwi users but run SolarWinds as well. I would expect better support for paying customers...

Screen Shot 2013-02-12 at 2.01.37 PM.png

That is our error when I run it.

My script is this:

sub Main()
{
use PAN::API;
$string = Fields.VarCleanMessageText;
$SERVER = SERVER_IP;
#Extract user and IP from string
     ....clipped...
# Create User ID API connection
$uid=PAN::API::UID->new($SERVER);
#Post data to agent
$uid->add('login',$username,$ip_address);
   $uid->submit();
   return "OK"; #return value for Kiwi
}

Works flawlessly if I pass the string in manually.

Really frustrated. I am about to modify the script to just farm the data out of the log file & purge it every minute as this is my ONLY application for Kiwi.

What a waste...

Kevin

Aforsythe

Kevin,

I was going to ask if Kiwi supports 64-bit Perl, but you've already responded with the fact that it works with a test string that you pass in manually, but fails as you're trying to parse actual messages.

That message essentially means that there is a problem with one of your functions or object properties. But it could mean an inconsistency in the data received.

In my case, I get that message when my device provides a message string that is unexpected and unaccounted for which breaks my substring function logic. My logic is perfectly fine and works flawlessly with my test string, but something deviated from my test cases in the messages I was receiving so I had to account for that. It took me forever to figure it out.

So my question would be "Where did your test string come from?" What I began doing is taking my VarCleanMessage variable and outputting it to a file when I want to create a new script. I filter based on my criteria and then log a few hundred lines and then begin parsing them in VB to make sure it does what I need it to do before I apply that same VB code to a script in Kiwi.

I have not run into this problem since and I don't worry about copy/paste errors or inconsistencies in the data.

Let me know if you ever get this resolved though.

chucks0

Did you get this to work? I have created a very simple Perl script:

sub Main(){

return "OK";

}

And still get the following error anytime the script is enabled:

Error info: Invalid character on line: 1

Aforsythe

Chuck,

Sorry I haven't had time to check in on the forums lately, and you may have already figured out the answer to this. The only thing I can think of that would cause the basic empty sub Main{} not to work is if the "Script Language" setting in the Run Script action was set to something other than Perl, and it would give that exact error if that was the case. I ran into this a lot when I was testing out different scripting languages with Kiwi and kept forgetting to change that setting. It's definitely a "Thwack" moment when you realize that's what the problem was.

And while I'm here, Kevin's problem (just speculation after testing, theory crafting and playing around with the scripting engine) is likely that Kiwi's implementation of Perl probably doesn't support the external API. This would explain why he can run the script from the command line but not from within Kiwi.He may have installed the API on that machine and it likely works with the normal Perl implementation, but I'm not certain how you would integrate that with Kiwi.

chucks0

Solardwinds has confirmed that there is a bug with the latest version of

Kiwi that prevents Perl scripts from working. Hopefully they will get it

fixed soon.

On Wed, Dec 31, 2014 at 1:00 PM, Acy Forsythe <

Aforsythe

Perl scripts are working for me and I thought I was on the latest version. I’ll check to make sure, but I tested several scripts before responding to the post.