Deployment Architecture

Why are we seeing search peer error "A script exited abnormally" on our deployment server and how do we stop it?

jsbollard
New Member

Getting multiples of the error below on our Deployment Server. Only references the server where Enterprise Security is installed. Help!

Search peer  has the following message: msg="A script exited abnormally" input="C:\Program Files\Splunk\bin\splunk-powershell.exe" stanza="default" status="exited with code 1"
0 Karma

maclel
Engager

Appears it is a known issue if you have a look at this answer page, and for the moment just follow the answer posted to suppress it:

https://answers.splunk.com/answers/313159/after-upgrading-my-indexer-and-search-head-to-splu.html

0 Karma

muebel
SplunkTrust
SplunkTrust

Hi jsbollard, That error doesn't seem to be related necessarily to Enterprise Security, but rather some scripted input. I'd scrutinize your input definitions, specifically any one of them that mentions powershell. If the scripted input isn't working, you can disable for the moment in order to avoid the error message (or otherwise figure out why it's failing).

Please let me know if this helps!

jsbollard
New Member

I'm still getting the error and am considering upgrading to the new 4.1 version of ESS.

0 Karma

Fraankiiie
Engager

i have the same problem, did you fixed this already or is it resolved in further updates from ESS?

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...