The dbxout is no longer working.
I have a support case open however they do not suggest downgrading.
I updated to 7.1.1 and dbconnect from 3.1.1 to 3.1.3 at the same time. By the time I realized the output was no longer working our backups had rolled over. Anyways the error is below:
Error in 'dbxoutput' command: Invalid message received from external search command during setup, see search.log.
The search job has failed due to an error. You may be able view the job in the Job Inspector.
search.log
07-26-2018 09:45:40.795 INFO ChunkedExternProcessor - Running process: /opt/splunk/etc/apps/splunk_app_db_connect/linux_x86_64/bin/command.sh -Dlogback.configurationFile=../default/command_logback.xml -DDBX_COMMAND_LOG_LEVEL=INFO -cp ../jars/command.jar com.splunk.dbx.command.DbxOutputCommand
07-26-2018 09:45:40.987 ERROR ChunkedExternProcessor - Failed attempting to parse transport header: 09:45:40.984 [main] DEBUG com.splunk.dbx.command.DbxOutputCommand - action=exec_dbxoutput_command args={}
07-26-2018 09:45:41.087 ERROR ChunkedExternProcessor - Failure reading getinfo chunk
07-26-2018 09:45:41.087 ERROR ChunkedExternProcessor - Error in 'dbxoutput' command: Invalid message received from external search command during setup, see search.log.
07-26-2018 09:45:41.103 INFO SearchPhaseGenerator - Failed to create phases using AST:Error in 'dbxoutput' command: Invalid message received from external search command during setup, see search.log.. Falling back to 2 phase mode.
07-26-2018 09:45:41.103 INFO SearchParser - PARSING: | inputlookup project_companies_lookup | dbxoutput output=output_project_companies_to_prestaging
07-26-2018 09:45:41.104 INFO ChunkedExternProcessor - Running process: /opt/splunk/etc/apps/splunk_app_db_connect/linux_x86_64/bin/command.sh -Dlogback.configurationFile=../default/command_logback.xml -DDBX_COMMAND_LOG_LEVEL=INFO -cp ../jars/command.jar com.splunk.dbx.command.DbxOutputCommand
07-26-2018 09:45:41.316 ERROR ChunkedExternProcessor - Failed attempting to parse transport header: 09:45:41.314 [main] DEBUG com.splunk.dbx.command.DbxOutputCommand - action=exec_dbxoutput_command args={}
07-26-2018 09:45:41.416 ERROR ChunkedExternProcessor - Failure reading getinfo chunk
07-26-2018 09:45:41.416 ERROR ChunkedExternProcessor - Error in 'dbxoutput' command: Invalid message received from external search command during setup, see search.log.
07-26-2018 09:45:41.422 ERROR SearchPhaseGenerator - Fallback to two phase search failed:Error in 'dbxoutput' command: Invalid message received from external search command during setup, see search.log.
07-26-2018 09:45:41.423 ERROR SearchOrchestrator - Error in 'dbxoutput' command: Invalid message received from external search command during setup, see search.log.
07-26-2018 09:45:41.423 INFO SearchStatusEnforcer - Enforcing disk quota = 10485760000
07-26-2018 09:45:41.424 INFO UserManager - Unwound user context: jake.houg -> NULL
07-26-2018 09:45:41.424 INFO UserManager - Unwound user context: jake.houg -> NULL
07-26-2018 09:45:41.425 ERROR dispatchRunner - RunDispatch::runDispatchThread threw error: Error in 'dbxoutput' command: Invalid message received from external search command during setup, see search.log.
... View more