I run this query index=emm_ascii nodeID=CCN_Voice_Lab and get my results, but I also get this:
[tibco_hdfs] Error while running external process, return_code=255. See search.log for more info
[tibco_hdfs] JobStartException - Failed to start MapReduce job. Please consult search.log for more information. Message: [ Failed to start MapReduce job, name=SPLK_PL-L1-HEYE-TOOL-01_1434044878.3041_0 ] and [ User: root is not allowed to impersonate mapr ]
Somehow Hunk is only executing as root. I set up passthrough for mapr user, but I get the error:
mapr uid is 5000.
If I don't use the passthrough, I get the root with uid = 0 needs to be greater than 500 error.