External search command 'mypythonfile' returned error code 1 after Splunk upgrade

harshal_chakran — Tue, 15 Jul 2014 07:26:48 GMT

Hi,
I am trying to run a python file in search command.

|script python mypythonfile

I was able to run it the Splunkversion 6.0 before. But when I shifed to 6.1, I am getting the following error while running the command:

External search command 'mypythonfile' returned error code 1.

I made the changes in commands.conf too.

[mypythonfile] filename= mypythonfile.py

Following is my mypythonfile.py file:

from pprint import pprint import socket import sys import os import time import csv import glob import unicodedata import Constants import shutil import splunklib.client as client import splunklib.results as results from xml.dom import minidom from utils import error, parse from time import sleep from array import array sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "..")) import SplunkMethods import ParsingAndFilteredCSV import Utilities import BSC import Cell import Network import WeakPerforming import threading from splunklib.modularinput import * from sys import exit try: import xml.etree.cElementTree as ET except ImportError: import xml.etree.ElementTree as ET def main(): ####MY CODE###### try: except: import traceback stack = traceback.format_exc() results = splunk.Intersplunk.generateErrorResults("Error : Traceback: " + str(stack)) if __name__ == "__main__": main()

Kindly Help...!!!

Re: External search command 'mypythonfile' returned error code 1 after Splunk upgrade

praveenkpatidar — Thu, 06 Oct 2016 02:25:23 GMT

Hello Harshal,

It seems the indentation is not correct in the python. To get this correct use below URL to check for Indent related errors. Package related errors are fine.
Once you resolve indent related errors, then you can use the file for custom commands.

https://www.tutorialspoint.com/execute_python_online.php

topic Re: External search command 'mypythonfile' returned error code 1 after Splunk upgrade in Splunk Dev

External search command 'mypythonfile' returned error code 1 after Splunk upgrade

Re: External search command 'mypythonfile' returned error code 1 after Splunk upgrade