I have a saved search that is currently running on a Windows search head that I have scheduled to backfill once a week. It's working just fine with with a scheduled task to launch the script:
splunk cmd python fill_summary_index.py -app search -name SUMMARY_INPUT-xxxxxxxxxxxxxx -et -1w@w0 -lt @d -j 4 -auth xxxxxx:xxxxxxxxxxxxxxxx
I'm trying to move it onto a Linux search head because the Windows one will be decommissioned soon. I have the same search scheduled to run on the Linux search head (duplicated entries in the Summary aren't a problem in this case).
When I manually log on to the CLI for this search head and run the same backfill script:
./splunk cmd python fill_summary_index.py -app search -name SUMMARY_INPUT-xxxxxxxxxxxxxx -et -1w@w0 -lt @d -j 4 -auth xxxxxx:xxxxxxxxxxxxxxxx
When I include the -auth xxxxxx:xxxxxxxxxxxxxxxx parameter, I get an error message saying Invalid username/password
but if I leave it out, then I'm prompted to enter the username and password and the script runs just fine.
NOTE: I'm using the same ID and password in both formats of the script.
The problem is that I need to set the script to run automatically on a schedule and since the -auth parameter doesn't get passed, the scheduled script never launches.
Thank you for your time and assistance!
