Monitoring Splunk

Why am I getting an error while creating a new app "ERROR SearchPhaseGenerator :Fallback to two phase search failed:Error in 'script'"?

avikramengg
Explorer

I have created a basic helloworld app but it is giving error

Please see below the log

07-31-2018 03:36:25.484 INFO  UserManager - Setting user context: admin
07-31-2018 03:36:25.484 INFO  UserManager - Done setting user context: NULL -> admin
07-31-2018 03:36:25.484 INFO  SearchOrchestrator - Creating the search DAG.
07-31-2018 03:36:25.484 INFO  SearchPhaseGenerator - Disabling summaries in verbose mode
07-31-2018 03:36:25.484 INFO  SearchParser - PARSING: search index="main" | helloworld
07-31-2018 03:36:25.487 INFO  UnifiedSearch - Processed search targeting arguments
07-31-2018 03:36:25.490 INFO  script - found script file=C:\Program Files\Splunk\etc\apps\hello_world\bin\helloworld.py
07-31-2018 03:36:25.490 INFO  script - stderr for script helloworld will be added to search.log
07-31-2018 03:36:25.592 ERROR script - Getinfo probe failed for external search command 'helloworld'
07-31-2018 03:36:25.592 INFO  SearchPhaseGenerator - Failed to create phases using AST:Error in 'script': Getinfo probe failed for external search command 'helloworld'. Falling back to 2 phase mode.
07-31-2018 03:36:25.592 INFO  SearchParser - PARSING: search index="main" | helloworld
07-31-2018 03:36:25.621 INFO  SearchProcessor - Building search filter
07-31-2018 03:36:25.649 INFO  UnifiedSearch - Expanded index search = index="main"
07-31-2018 03:36:25.649 INFO  UnifiedSearch - base lispy: [ AND index::main ]
07-31-2018 03:36:25.649 INFO  UnifiedSearch - Processed search targeting arguments
07-31-2018 03:36:25.649 INFO  script - found script file=C:\Program Files\Splunk\etc\apps\hello_world\bin\helloworld.py
07-31-2018 03:36:25.649 INFO  script - stderr for script helloworld will be added to search.log
07-31-2018 03:36:25.750 ERROR script - Getinfo probe failed for external search command 'helloworld'
07-31-2018 03:36:25.750 ERROR SearchPhaseGenerator - Fallback to two phase search failed:Error in 'script': Getinfo probe failed for external search command 'helloworld'
07-31-2018 03:36:25.762 ERROR SearchOrchestrator - Error in 'script': Getinfo probe failed for external search command 'helloworld'
07-31-2018 03:36:25.762 INFO  SearchStatusEnforcer - Enforcing disk quota = 10485760000
07-31-2018 03:36:25.778 INFO  UserManager - Unwound user context: admin -> NULL
07-31-2018 03:36:25.788 INFO  UserManager - Unwound user context: admin -> NULL
07-31-2018 03:36:25.799 INFO  ShutdownHandler - Shutting down splunkd
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_Begin"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_FileIntegrityChecker"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_JustBeforeKVStore"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_KVStore"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_Thruput"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_TcpInput1"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_ExecSendInitialSigterm"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_TcpOutput"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_UdpInput"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_FifoInput"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_RemoteQueueInput"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_WinEventLogInput"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_HttpInput"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_SelfStorageArchiver"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_CacheManager"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_Scheduler"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_SyslogOutput"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_HTTPOutput"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_ArchiveAndOneshot"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_MainThread"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_Exec"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_Tailing"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_PeerManager"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_AuditTrailManager"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_AuditTrailQueueServiceThread"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_FSChangeMonitor"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_FSChangeManagerProcessor"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_DeploymentClient"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_HttpClientPollingThread"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_AsyncQueuedMessageDispatcherThread"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_RemoteQueueOutput"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_OfflineFlusher"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_Slave"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_SlaveSearch"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_Captain"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_Select"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_IdataDO_Collector"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_TcpOutput2"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_IndexerService"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_Database1"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_LastIndexerLevel"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_AWSMetering"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_TcpInput2"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_RemoteQueueInputWorker"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_RemoteQueue"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_RemoteFileSystem"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_LocalFileSystem"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_SearchDispatch"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_LoadLDAPUsers"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_MetricsManager"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_Pipeline"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_Queue"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_CallbackRunner"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_HttpClient"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_DmcProxyHttpClient"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_Duo2FAHttpClient"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_ApplicationLicenseChecker"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_S3ConnectionPoolManager"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - shutting down level "ShutdownLevel_TelemetryMetricBuffer"
07-31-2018 03:36:25.799 INFO  ShutdownHandler - Shutdown complete in 0 microseconds
07-31-2018 03:36:25.800 ERROR dispatchRunner - RunDispatch::runDispatchThread threw error: Error in 'script': Getinfo probe failed for external search command 'helloworld'

Can anyone please help me on this?

Regards,
Amit Vikram

0 Karma
1 Solution

avikramengg
Explorer

under commands.conf following configuration was causing issue

supports_getinfo = true

When I removed it , it worked fine

Regards,
Amit Vikram

View solution in original post

0 Karma

avikramengg
Explorer

under commands.conf following configuration was causing issue

supports_getinfo = true

When I removed it , it worked fine

Regards,
Amit Vikram

0 Karma

avikramengg
Explorer

Note: the C:\Program Files\Splunk\etc\apps\hello_world\bin\helloworld.py is a simple script which only do
print "hello world"

0 Karma
Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...