<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How do I get the diff.py command to work? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-get-the-diff-py-command-to-work/m-p/16020#M2082</link>
    <description>&lt;P&gt;Sounds like you may have a problem after your migration.  The &lt;CODE&gt;diff.py&lt;/CODE&gt; is an internal command in the &lt;CODE&gt;search&lt;/CODE&gt; app that should work out of the box.&lt;/P&gt;

&lt;P&gt;I took a quick look at that script on my 4.1.2 install and &lt;CODE&gt;diff.py&lt;/CODE&gt; does call &lt;CODE&gt;splunk.Intersplunk.isGetInfo&lt;/CODE&gt; and  &lt;CODE&gt;commands.conf&lt;/CODE&gt; is set accordly with &lt;CODE&gt;supports_getinfo = true&lt;/CODE&gt;. So I suspect that you have a out-of-sync install.  I'm guessing you will continue to find other components that that may not be working properly anymore.&lt;/P&gt;

&lt;P&gt;Have you tried re-installing the latest version overtop of your install.  I suspect that would replace these built in components and get them working again.  That's just a thought.&lt;/P&gt;

&lt;P&gt;You may also want to add to your question the details of your migration process.  Specifically, did you move across platforms, did your install path change between systems, and so on.&lt;/P&gt;</description>
    <pubDate>Wed, 23 Jun 2010 22:51:53 GMT</pubDate>
    <dc:creator>Lowell</dc:creator>
    <dc:date>2010-06-23T22:51:53Z</dc:date>
    <item>
      <title>How do I get the diff.py command to work?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-get-the-diff-py-command-to-work/m-p/16019#M2081</link>
      <description>&lt;P&gt;I moved my Splunk instance to another machine and I'm getting the following error message: 2010-06-15 16:20:24,739 ERROR    [4c17e085c52d202e8] parser:103 - Error in 'script': Getinfo probe failed for external search command 'diff'. How do I get this script to execute correctly?&lt;/P&gt;</description>
      <pubDate>Wed, 23 Jun 2010 22:36:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-do-I-get-the-diff-py-command-to-work/m-p/16019#M2081</guid>
      <dc:creator>rsimmons</dc:creator>
      <dc:date>2010-06-23T22:36:07Z</dc:date>
    </item>
    <item>
      <title>Re: How do I get the diff.py command to work?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-get-the-diff-py-command-to-work/m-p/16020#M2082</link>
      <description>&lt;P&gt;Sounds like you may have a problem after your migration.  The &lt;CODE&gt;diff.py&lt;/CODE&gt; is an internal command in the &lt;CODE&gt;search&lt;/CODE&gt; app that should work out of the box.&lt;/P&gt;

&lt;P&gt;I took a quick look at that script on my 4.1.2 install and &lt;CODE&gt;diff.py&lt;/CODE&gt; does call &lt;CODE&gt;splunk.Intersplunk.isGetInfo&lt;/CODE&gt; and  &lt;CODE&gt;commands.conf&lt;/CODE&gt; is set accordly with &lt;CODE&gt;supports_getinfo = true&lt;/CODE&gt;. So I suspect that you have a out-of-sync install.  I'm guessing you will continue to find other components that that may not be working properly anymore.&lt;/P&gt;

&lt;P&gt;Have you tried re-installing the latest version overtop of your install.  I suspect that would replace these built in components and get them working again.  That's just a thought.&lt;/P&gt;

&lt;P&gt;You may also want to add to your question the details of your migration process.  Specifically, did you move across platforms, did your install path change between systems, and so on.&lt;/P&gt;</description>
      <pubDate>Wed, 23 Jun 2010 22:51:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-do-I-get-the-diff-py-command-to-work/m-p/16020#M2082</guid>
      <dc:creator>Lowell</dc:creator>
      <dc:date>2010-06-23T22:51:53Z</dc:date>
    </item>
  </channel>
</rss>

