@MuS
Thanks for you app first - great stuff 🙂
I am running
| refresh entity=savedsearch
but I am getting
External search command 'refresh' returned error code 1. . any ideas would be great thanks 🙂
@mirazgheib
Hi robertlynch2020,
enable debugging like in the documentation written:
Debug
If needed you can enabled debugging to splunkd.log in the script refresh.py by
setting myDebug='yes' on line 6
If this does not provide any useful message, try running the script from the CLI like this:
$SPLUNK_HOME/bin/splunk cmd python $SPLUNK_HOME/etc/apps/TA-debug-refresh/bin/refresh.py
Hope this helps ...
cheers, MuS
Update
Looks like I'm not good in error capturing, the endpoint actually reloads - you can see it in the debug logs. But something after the reload makes the script think there was an error .... oh well debugging time ¯\_(ツ)_/¯
cheers, MuS