Deployment Architecture

Why are we seeing search peer error "A script exited abnormally" on our deployment server and how do we stop it?

jsbollard
New Member

Getting multiples of the error below on our Deployment Server. Only references the server where Enterprise Security is installed. Help!

Search peer  has the following message: msg="A script exited abnormally" input="C:\Program Files\Splunk\bin\splunk-powershell.exe" stanza="default" status="exited with code 1"
0 Karma

maclel
Engager

Appears it is a known issue if you have a look at this answer page, and for the moment just follow the answer posted to suppress it:

https://answers.splunk.com/answers/313159/after-upgrading-my-indexer-and-search-head-to-splu.html

0 Karma

muebel
SplunkTrust
SplunkTrust

Hi jsbollard, That error doesn't seem to be related necessarily to Enterprise Security, but rather some scripted input. I'd scrutinize your input definitions, specifically any one of them that mentions powershell. If the scripted input isn't working, you can disable for the moment in order to avoid the error message (or otherwise figure out why it's failing).

Please let me know if this helps!

jsbollard
New Member

I'm still getting the error and am considering upgrading to the new 4.1 version of ESS.

0 Karma

Fraankiiie
Engager

i have the same problem, did you fixed this already or is it resolved in further updates from ESS?

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...