https://community.splunk.com/t5/Getting-Data-In/ERROR-ChunkedExternProcessor-Failed-to-find-newline-while/m-p/426348#M95078 <P>I followed the instructions <A href="http://dev.splunk.com/view/SP-CAAAFFT" target="_blank">http://dev.splunk.com/view/SP-CAAAFFT</A> and created a custom search command 'snincident' ( app name is SNow-incident-creation and test.py has all the code)<BR /> I am making a servicenow api call for incident creation. <BR /> when I do the <CODE>| snincident</CODE> all i see are errors below</P> <P>06-14-2019 12:16:49.551 INFO ChunkedExternProcessor - Running process: /opt/splunk/bin/python /opt/splunk/etc/apps/SNow-incident-creation/bin/test.py<BR /> 06-14-2019 12:16:50.790 ERROR ChunkedExternProcessor - Failed to find newline while reading transport header.<BR /> 06-14-2019 12:16:50.819 ERROR ChunkedExternProcessor - Error in 'snincident' command: External search command exited unexpectedly.<BR /> 06-14-2019 12:16:50.819 INFO SearchParser - PARSING: | snincident<BR /> 06-14-2019 12:16:50.820 INFO ChunkedExternProcessor - Running process: /opt/splunk/bin/python /opt/splunk/etc/apps/SNow-incident-creation/bin/test.py<BR /> 06-14-2019 12:16:52.458 ERROR ChunkedExternProcessor - Failed to find newline while reading transport header.<BR /> 06-14-2019 12:16:52.458 ERROR ChunkedExternProcessor - Error in 'snincident' command: External search command exited unexpectedly.<BR /> 06-14-2019 12:16:52.458 INFO SearchPhaseGenerator - Failed to create phases using AST:Error in 'snincident' command: External search command exited unexpectedly.. Falling back to 2 phase mode.</P> <P>When I run the command on command line with python for splunk it works :<BR /> -bash-4.2$ /opt/splunk/bin/python /opt/splunk/etc/apps/SNow-incident-creation/bin/test.py<BR /> {u'result': {u'ticket_number': u'INC3010096', u'ticket_link': u'<A href="https://snow-link/nav_to.do?uri=/incident.do?sys_id=520b7b95db4e" target="_blank">https://snow-link/nav_to.do?uri=/incident.do?sys_id=520b7b95db4e</A>', u'ticket_id': u'520b7b9', u'get_ticket_record_api': u'<A href="https://snow-link/api/now/table/incident/520b7b95db4e77c42bf5453f2996197d?sysparm_display_value=true&amp;sysparm_exclude_reference_link=true'%7D" target="_blank">https://snow-link/api/now/table/incident/520b7b95db4e77c42bf5453f2996197d?sysparm_display_value=true&amp;sysparm_exclude_reference_link=true'}</A>}</P> <P>I am not sure how to fix this issue.</P> Wed, 30 Sep 2020 00:56:25 GMT suser2019 2020-09-30T00:56:25Z https://community.splunk.com/t5/Getting-Data-In/ERROR-ChunkedExternProcessor-Failed-to-find-newline-while/m-p/426348#M95078 <P>I followed the instructions <A href="http://dev.splunk.com/view/SP-CAAAFFT" target="_blank">http://dev.splunk.com/view/SP-CAAAFFT</A> and created a custom search command 'snincident' ( app name is SNow-incident-creation and test.py has all the code)<BR /> I am making a servicenow api call for incident creation. <BR /> when I do the <CODE>| snincident</CODE> all i see are errors below</P> <P>06-14-2019 12:16:49.551 INFO ChunkedExternProcessor - Running process: /opt/splunk/bin/python /opt/splunk/etc/apps/SNow-incident-creation/bin/test.py<BR /> 06-14-2019 12:16:50.790 ERROR ChunkedExternProcessor - Failed to find newline while reading transport header.<BR /> 06-14-2019 12:16:50.819 ERROR ChunkedExternProcessor - Error in 'snincident' command: External search command exited unexpectedly.<BR /> 06-14-2019 12:16:50.819 INFO SearchParser - PARSING: | snincident<BR /> 06-14-2019 12:16:50.820 INFO ChunkedExternProcessor - Running process: /opt/splunk/bin/python /opt/splunk/etc/apps/SNow-incident-creation/bin/test.py<BR /> 06-14-2019 12:16:52.458 ERROR ChunkedExternProcessor - Failed to find newline while reading transport header.<BR /> 06-14-2019 12:16:52.458 ERROR ChunkedExternProcessor - Error in 'snincident' command: External search command exited unexpectedly.<BR /> 06-14-2019 12:16:52.458 INFO SearchPhaseGenerator - Failed to create phases using AST:Error in 'snincident' command: External search command exited unexpectedly.. Falling back to 2 phase mode.</P> <P>When I run the command on command line with python for splunk it works :<BR /> -bash-4.2$ /opt/splunk/bin/python /opt/splunk/etc/apps/SNow-incident-creation/bin/test.py<BR /> {u'result': {u'ticket_number': u'INC3010096', u'ticket_link': u'<A href="https://snow-link/nav_to.do?uri=/incident.do?sys_id=520b7b95db4e" target="_blank">https://snow-link/nav_to.do?uri=/incident.do?sys_id=520b7b95db4e</A>', u'ticket_id': u'520b7b9', u'get_ticket_record_api': u'<A href="https://snow-link/api/now/table/incident/520b7b95db4e77c42bf5453f2996197d?sysparm_display_value=true&amp;sysparm_exclude_reference_link=true'%7D" target="_blank">https://snow-link/api/now/table/incident/520b7b95db4e77c42bf5453f2996197d?sysparm_display_value=true&amp;sysparm_exclude_reference_link=true'}</A>}</P> <P>I am not sure how to fix this issue.</P> Wed, 30 Sep 2020 00:56:25 GMT https://community.splunk.com/t5/Getting-Data-In/ERROR-ChunkedExternProcessor-Failed-to-find-newline-while/m-p/426348#M95078 suser2019 2020-09-30T00:56:25Z https://community.splunk.com/t5/Getting-Data-In/ERROR-ChunkedExternProcessor-Failed-to-find-newline-while/m-p/426349#M95079 <P>any help please.</P> Thu, 27 Jun 2019 21:05:51 GMT https://community.splunk.com/t5/Getting-Data-In/ERROR-ChunkedExternProcessor-Failed-to-find-newline-while/m-p/426349#M95079 suser2019 2019-06-27T21:05:51Z