All Apps and Add-ons

HUNK: Error while running external process, return_code=126.

ryu_kahou
Explorer

I installed HUNK to work with local hadoop cluster (hadoop 2.3.0 YARN). The following error happened when running search command "index=virtual_index_name".

[smllog] Error while running external process, return_code=126. See search.log for more info

I checked the content of search.log and found no error. The following is something may be related.

11-19-2014 09:48:13.787 INFO  UserManager - Done setting user context: NULL -> hadoop_user_name
11-19-2014 09:48:13.787 INFO  UserManager - Unwound user context: hadoop_user_name -> NULL
11-19-2014 09:48:13.787 INFO  DispatchManager - DispatchManager::dispatchHasFinished(id='1416358093.13', username='hadoop_user_name')
11-19-2014 09:48:13.788 INFO  UserManager - Unwound user context: hadoop_user_name -> NULL
11-19-2014 09:48:13.789 INFO  ShutdownHandler - Shutting down splunkd
11-19-2014 09:48:13.789 INFO  ShutdownHandler - shutting down level "ShutdownLevel_Begin"

How could I found the detail of HUNK error?

1 Solution

rdagan_splunk
Splunk Employee
Splunk Employee

Error running external process normally means Hunk cannot find your Hadoop or Java processes.
So if your Hadoop processes is '/usr/bin/hadoop' in the Hunk configuration you will need to put ' /usr ' (Hunk will add /bin/hadoop)

View solution in original post

rdagan_splunk
Splunk Employee
Splunk Employee

Error running external process normally means Hunk cannot find your Hadoop or Java processes.
So if your Hadoop processes is '/usr/bin/hadoop' in the Hunk configuration you will need to put ' /usr ' (Hunk will add /bin/hadoop)

ryu_kahou
Explorer

Thank you very much. You saved me a lot of time.
I set java home to /usr/bin/java. After I changed it to /usr/java/jdk, it works.

Get Updates on the Splunk Community!

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...

Want a chance to win $500 to the Splunk shop? Take our IT Incident Management Survey!

  Top Trends & Best Practices in Incident ManagementSplunk is partnering up with Constellation Research to ...