topic Re: | refresh entity=savedsearch not working (Add-on Debug Refresh) in All Apps and Add-ons

| refresh entity=savedsearch not working (Add-on Debug Refresh)

robertlynch2020 — Thu, 28 Nov 2019 11:44:23 GMT

@MuS

Thanks for you app first - great stuff 🙂

I am running
| refresh entity=savedsearch
but I am getting
External search command 'refresh' returned error code 1. . any ideas would be great thanks 🙂

@mirazgheib

Re: | refresh entity=savedsearch not working (Add-on Debug Refresh)

MuS — Thu, 28 Nov 2019 20:29:41 GMT

Hi robertlynch2020,

enable debugging like in the documentation written:

Debug

If needed you can enabled debugging to splunkd.log in the script refresh.py by
setting myDebug='yes' on line 6

If this does not provide any useful message, try running the script from the CLI like this:

$SPLUNK_HOME/bin/splunk cmd python $SPLUNK_HOME/etc/apps/TA-debug-refresh/bin/refresh.py

Hope this helps ...

cheers, MuS

Re: | refresh entity=savedsearch not working (Add-on Debug Refresh)

MuS — Thu, 28 Nov 2019 23:45:38 GMT

Update

Looks like I'm not good in error capturing, the endpoint actually reloads - you can see it in the debug logs. But something after the reload makes the script think there was an error .... oh well debugging time ¯\_(ツ)_/¯

cheers, MuS