All Apps and Add-ons

I have made the geoloation_lookup and confirmed its seen in Geolocation KV store within app. Not getting any reconciliation done though.

ken_bouchard
New Member

In splunk internal logs I get this as the error
ERROR script - sid:scheduler_nobody_cGh5c2ljYWxfYWRkcmVzc190b19nZW9sb2NhdGlvbg_RMD596155ee2668180f0_at_1517361300_953 command="runshellscript", Script: /opt/splunk/bin/scripts/address_to_lat_lon.pl exited with status code: 255

Line Previous has this

INFO runshellscript:222 - runshellscript: ['/usr/bin/perl', '/opt/splunk/bin/scripts/address_to_lat_lon.pl', '3466', '| inputlookup geolocation_lookup\n| eval key_id = key\n| search (cust_lat=DNE OR cust_lon=DNE OR location_type=DNE) in_reconciliation=no', '| inputlookup geolocation_lookup\n| eval key_id = _key\n| search (cust_lat=DNE OR cust_lon=DNE OR location_type=DNE) in_reconciliation=no', 'Update Geolocation', 'Saved Search [Update Geolocation] number of events(3466)', 'http://splunk-prd.abcwua.org:8000/app/physical_address_to_geolocation/@go?sid=schedulernobody_cGh5c2ljYWxfYWRkcmVzc190b19nZW9sb2NhdGlvbgRMD596155ee2668180f0_at_1517361300_953', '', '/opt/splunk/var/run/splunk/dispatch/schedulernobody_cGh5c2ljYWxfYWRkcmVzc190b19nZW9sb2NhdGlvbg_RMD596155ee2668180f0_at_1517361300_953/results.csv.gz']

any assistance would be great. Not seeing anything being created in the output.log or debug.log within the apps.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...