All Apps and Add-ons

SA-geodistance app - remedy for "buffer full" error?

wryanthomas
Communicator

Hi there. Thanks for this app!

I'm experiencing the following error when passing high record volume to geodistance command (in both Splunk Enterprise and Splunk Cloud):

ERROR ChunkedExternProcessor - Failure writing result chunk, buffer full. External process possibly failed to read its stdin.

According to another post on answers.splunk.com, it looks like someone (kulick?) might have a solution to this issue:
https://answers.splunk.com/answers/686940/how-come-custom-search-commands-csc-scpv2-cannot-h.html

He references a fix in git hub: "The solution is embodied in the new 'echo' custom command implemented in this change...
https://github.com/TiVo/splunk-sdk-python/commit/5188f7d709cadd80e786692b371a64c4ae0991d2

There is additional reporting of this issue here:
https://github.com/splunk/splunk-sdk-python/issues/150

Would it be possible to investigate this for a possible fix?

Tags (1)
0 Karma

seunomosowon
Communicator

Yes that'll work nicely. I'll try incorporate it into the app next week.

0 Karma

wryanthomas
Communicator

Excellent. Any update?

0 Karma

wryanthomas
Communicator

Hey there. Just checking in. Is this still in the works?

0 Karma

wryanthomas
Communicator

Hi @seunomosowon . I see in Splunkbase that this app was updated to v1.2.0 on 12/28/2020.

I'm not seeing any indication in the Details page that this "buffer full" issue was addressed.

Any chance there's a fix for this on the way?

 

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>