All Apps and Add-ons

I have made the geoloation_lookup and confirmed its seen in Geolocation KV store within app. Not getting any reconciliation done though.

ken_bouchard
New Member

In splunk internal logs I get this as the error
ERROR script - sid:scheduler_nobody_cGh5c2ljYWxfYWRkcmVzc190b19nZW9sb2NhdGlvbg_RMD596155ee2668180f0_at_1517361300_953 command="runshellscript", Script: /opt/splunk/bin/scripts/address_to_lat_lon.pl exited with status code: 255

Line Previous has this

INFO runshellscript:222 - runshellscript: ['/usr/bin/perl', '/opt/splunk/bin/scripts/address_to_lat_lon.pl', '3466', '| inputlookup geolocation_lookup\n| eval key_id = key\n| search (cust_lat=DNE OR cust_lon=DNE OR location_type=DNE) in_reconciliation=no', '| inputlookup geolocation_lookup\n| eval key_id = _key\n| search (cust_lat=DNE OR cust_lon=DNE OR location_type=DNE) in_reconciliation=no', 'Update Geolocation', 'Saved Search [Update Geolocation] number of events(3466)', 'http://splunk-prd.abcwua.org:8000/app/physical_address_to_geolocation/@go?sid=schedulernobody_cGh5c2ljYWxfYWRkcmVzc190b19nZW9sb2NhdGlvbgRMD596155ee2668180f0_at_1517361300_953', '', '/opt/splunk/var/run/splunk/dispatch/schedulernobody_cGh5c2ljYWxfYWRkcmVzc190b19nZW9sb2NhdGlvbg_RMD596155ee2668180f0_at_1517361300_953/results.csv.gz']

any assistance would be great. Not seeing anything being created in the output.log or debug.log within the apps.

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...