| refresh entity=savedsearch not working (Add-on Debug Refresh)

[robertlynch2020]

@MuS

Thanks for you app first - great stuff 🙂

I am running
| refresh entity=savedsearch
but I am getting
External search command 'refresh' returned error code 1. . any ideas would be great thanks 🙂

@mirazgheib

[MuS]

Hi robertlynch2020,

enable debugging like in the documentation written:

Debug

If needed you can enabled debugging to splunkd.log in the script refresh.py by
setting myDebug='yes' on line 6

If this does not provide any useful message, try running the script from the CLI like this:

$SPLUNK_HOME/bin/splunk cmd python $SPLUNK_HOME/etc/apps/TA-debug-refresh/bin/refresh.py

Hope this helps ...

cheers, MuS

[MuS]

Update

Looks like I'm not good in error capturing, the endpoint actually reloads - you can see it in the debug logs. But something after the reload makes the script think there was an error .... oh well debugging time ¯\_(ツ)_/¯

cheers, MuS